Cornucopia - Ecommerce Website - AT J
Mark can access resources or services because there is no authentication requirement, or it was mistakenly assumed authentication would be undertaken by some other system or performed in some previous action.
For each entry point, check and test that the correct degree of authentication is required and occurs. Ensure this includes:
- Access to remote systems.
- Non HTML content (e.g. files, images).
- Any other 'internal' functionality.
|OWASP SCP||OWASP ASVS||OWASP AppSensor||CAPEC||SAFECODE|