7️⃣Broken Access Control & Broken Authentication
Last updated
Last updated
Broken Access Control: This vulnerability arises when an application fails to enforce appropriate permissions, allowing users to access unauthorized resources or actions. It can lead to data breaches, unauthorized modifications, and exposure of sensitive information.
Broken Authentication: This occurs when an application’s authentication mechanisms are poorly implemented, allowing attackers to compromise user identities. Common issues include weak password policies, insufficient protection of credentials, and improper session handling.