This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Business logic vulnerability"
From OWASP
Line 2: | Line 2: | ||
{{Template:Vulnerability}} | {{Template:Vulnerability}} | ||
+ | __TOC__ | ||
− | [[ | + | [[ASDR Table of Contents]] |
− | |||
− | |||
− | |||
Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}''' | Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}''' | ||
− | |||
− | [[ | + | [[Category:FIXME|Stub article, needs review]] |
==Description== | ==Description== | ||
Line 74: | Line 71: | ||
==References== | ==References== | ||
− | + | TBD | |
− | |||
− | |||
− | |||
− | |||
− | |||
+ | [[Category:FIXME| | ||
In addition, one should classify vulnerability based on the following subcategories: Ex:<nowiki>[[Category:Error Handling Vulnerability]]</nowiki> | In addition, one should classify vulnerability based on the following subcategories: Ex:<nowiki>[[Category:Error Handling Vulnerability]]</nowiki> | ||
Line 103: | Line 96: | ||
Logging and Auditing Vulnerability | Logging and Auditing Vulnerability | ||
− | Session Management Vulnerability | + | Session Management Vulnerability]] |
__NOTOC__ | __NOTOC__ |
Revision as of 11:39, 29 October 2008
This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.
This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.
Last revision (mm/dd/yy): 10/29/2008
Description
TBD
A vulnerability is a weakness in an application (frequently a broken or missing control) that enables an attack to succeed. Be sure you don't put [attacks] or [controls] in this category.
- Start with a one-sentence description of the vulnerability
- What is the problem that creates the vulnerability?
- What are the attacks that target this vulnerability?
- What are the technical impacts of this vulnerability?
Risk Factors
TBD
- Talk about the factors that make this vulnerability likely or unlikely to actually happen
- Discuss the technical impact of a successful exploit of this vulnerability
- Consider the likely [business impacts] of a successful attack
Examples
TBD
Short example name
- A short example description, small picture, or sample code with links
Short example name
- A short example description, small picture, or sample code with links
Related Attacks
Related Vulnerabilities
Note: the contents of "Related Problems" sections should be placed here
Related Controls
Note: contents of "Avoidance and Mitigation" and "Countermeasure" related Sections should be placed here
Related Technical Impacts
References
TBD