An adversary may gain access to data and functionalities by bypassing the target authentication mechanism

Example #1

1. Threat actor requests a web application interface
2. Sever sends a login request
3. Threat actor adds a parameter that bypasses the authentication
4. Sever sends the web application interface

Impact

High

Risk

• Gain unauthorized access

Redemption

• Validate access control

ID

0b73c51c-728c-4005-a1f1-84e303bbac1e

References

• wiki