Clark, a professional hacker, exploited the web application of a target organization by tampering the form and parameter values. He successfully exploited the web application and gained access to…

The correct answer is A. Broken access control. The vulnerability exploited by Clark through tampering with form and parameter values to gain unauthorized access to information assets is indicative of Broken Access Control. Broken Access Control vulnerabilities occur when a web application does not properly enforce…

Incident Handling and Response Technologies

Question

Clark, a professional hacker, exploited the web application of a target organization by tampering the form and parameter values. He successfully exploited the web application and gained access to the information assets of the organization. Identify the vulnerability in the web application exploited by the attacker.

Options

ABroken access control
BSecurity misconfiguration
CSQL injection
DSensitive data exposure

How the community answered

(66 responses)

A
74% (49)
B
14% (9)
C
9% (6)
D
3% (2)

Explanation

The vulnerability exploited by Clark through tampering with form and parameter values to gain unauthorized access to information assets is indicative of Broken Access Control. Broken Access Control vulnerabilities occur when a web application does not properly enforce restrictions on what authenticated users are allowed to do. Attackers can exploit these vulnerabilities to access unauthorized functionality or data, such as accessing other users' accounts, viewing sensitive files, and modifying other users' data.

Topics

#broken access control#parameter tampering#web application security#OWASP

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice