This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Test Account Provisioning Process (OTG-IDENT-003)
From OWASP
Revision as of 14:42, 28 July 2013 by Andrew Muller (talk | contribs) (Created page with "== Summary == The provisioning of accounts presents an opportunity for an attacker to create a valid account without application of the proper identification and authorizatio...")
Summary
The provisioning of accounts presents an opportunity for an attacker to create a valid account without application of the proper identification and authorization process.
Test objectives
Verify which accounts may provision other accounts and of what type