312-49 · Question #141
The evolution of web services and their increasing use in business offers new attack vectors in an application framework. Web services are based on XML protocols such as web Services Definition…
The correct answer is C. Discovery Layer. In the web services stack, the Discovery Layer (based on UDDI) is vulnerable to fault code leaks. SOAP fault messages returned during the discovery and lookup process can inadvertently expose internal implementation details, error messages, and system information to an…
Question
The evolution of web services and their increasing use in business offers new attack vectors in an application framework. Web services are based on XML protocols such as web Services Definition Language (WSDL) for describing the connection points, Universal Description, Discovery, and Integration (UDDI) for the description and discovery of Web services and Simple Object Access Protocol (SOAP) for communication between Web services that are vulnerable to various web application threats. Which of the following layer in web services stack is vulnerable to fault code leaks?
Options
- APresentation Layer
- BSecurity Layer
- CDiscovery Layer
- DAccess Layer
How the community answered
(56 responses)- A2% (1)
- B4% (2)
- C89% (50)
- D5% (3)
Explanation
In the web services stack, the Discovery Layer (based on UDDI) is vulnerable to fault code leaks. SOAP fault messages returned during the discovery and lookup process can inadvertently expose internal implementation details, error messages, and system information to an attacker. Fault codes in SOAP responses reveal information about the service structure and can be exploited. The other layers (Presentation, Security, Access) have their own vulnerabilities but fault code leakage is specifically associated with the Discovery Layer.
Topics
Community Discussion
No community discussion yet for this question.