Broken access control
Even the most comprehensive security strategies will have little effect if they're not properly enforced. Unfortunately, this is often the case, with seemingly advanced security solutions implemented but, ultimately, failing to prove up to their full potential.
The chief culprit? Broken access control — when unauthorized parties gain access to seemingly protected systems and user accounts. This unexpected access leaves sensitive data at great risk. Often, applications with this issue fail to truly follow the rule of least privilege, which maintains that users should only be granted the specific permissions needed to carry out required tasks.
Worrisome findings from OWASP indicate that the vast majority of applications suffer broken access control to some extent, so it would be an understatement to refer to this problem as widespread.
Comments
Post a Comment