Top 1: Broken Access Control

What is the difference between authentication and authorization in the context of access control?

• Authentication ensures data confidentiality, while authorization ensures data integrity

• Authentication verifies user identity, while authorization determines what actions they can perform.

• Authentication involves encrypting data, while authorization involves decrypting it.

• Authentication and authorization are two terms for the same security concept.

Which HTTP status code is commonly used to indicate that a user is attempting to access a resource for which they do not have the necessary permissions?

• 200 OK

• 401 Unauthorized

• 403 Forbidden

• 404 Not Found

In a multi-tenant web application, how should access control be managed to prevent unauthorized access to tenant-specific data?

• Use a single set of credentials for all tenants

• Implement a shared access control list (ACL) for all tenants.

• Employ role-based access control (RBAC) with separate roles for each tenant.

• Grant full access to all tenants to simplify management

Which of the following best describes the principle of "least privilege"?

• Giving users the maximum possible access to resources

• Limiting users' access to the minimum necessary to perform their tasks

• Allowing users to access any resource at any time

• Granting access based solely on user roles

In a web application, users can change their email addresses by submitting a form with the new email. To protect against broken access control vulnerabilities, which of the following should be checked before updating the email?

• The user's role in the application

• The user's session ID

• The user's current email address

• The user's authentication token

What flaw arises from session tokens having poor randomness across a range of values?

• Insecure Direct Object References

• Session Replay

• Session Fixation

• Session Hijacking

For every link or form which invokes state-changing functions with an unpredictable token for each user what attack can be prevented?

• OS Commanding

• Cross-Site Scripting

• Cross Site Request Forgery

• Cross Site Tracing

The following pseudo-code snippet contains what kind of vulnerability?

• Cross-Site Scripting

• Session Hijacking

• Direct Object Reference

• Unchecked redirect

• No vulnerability present

When tasked which verifying function access control in the following code snippet, which of the following is an appropriate course of action?

• Submit a request to the server with actions= ' or 'a'='a&id=2

• Submit a request to the server with parameters action=../../ect/passwd%00&id = 2

• Submit a request to the server with the parameters action=delete&id=2

User selects item -> summary page -> Payment. Which of the following can be business logic flaw in above business flow:

• Denial of service of Payment gateway

• Including local files

• Able to go back to summary page with same session and lower the total price

• None of the above