This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Top 10 2013-A5-Security Misconfiguration"

From OWASP
Jump to: navigation, search
Line 12: Line 12:
  
 
{{Top_10:SummaryTableValues
 
{{Top_10:SummaryTableValues
−
  | year=2013
+
    |DIFFICULT|#FFFF00
−
  | 1 | EASY
+
    |UNCOMMON|#FFFF00
−
  | 2 | COMMON
+
    |AVERAGE|#FFC000
−
  | 1 | EASY
+
    |SEVERE|#FF0000
−
  | 2 | MODERATE
+
    |year=2013
 
}}
 
}}
  
−
{{Top_10_2010:SummaryTableValues|DIFFICULT}}
 
−
 
−
{{Top_10_2010:SummaryTableHeaderBeginTemplate}}
 
−
{{Top_10_2010:SummaryTableValue-2-Template|Prevalence|COMMON}}
 
−
{{Top_10_2010:SummaryTableValue-1-Template|Detectability|EASY}}
 
−
{{Top_10_2010:SummaryTableValue-2-Template|Impact|MODERATE}}
 
 
{{Top_10_2010:SummaryTableHeaderEndTemplate}}
 
{{Top_10_2010:SummaryTableHeaderEndTemplate}}
 
     <td {{Template:Top 10 2010:SummaryTableRowStyleTemplate}}>blank.</td>
 
     <td {{Template:Top 10 2010:SummaryTableRowStyleTemplate}}>blank.</td>

Revision as of 16:16, 17 February 2013

TEMPORARY PLACEHOLDER for 2013 T10

NOTE: THIS IS NOT THE LATEST VERSION. Please visit the OWASP Top 10 project page to find the latest edition.

[[Top 10 {{{year}}}-Insecure Direct Object References|← Insecure Direct Object References]]
[[Top 10 {{{year}}}-Table of Contents | {{{year}}} Table of Contents]]

[[Top_10_{{{year}}}-Top 10|{{{year}}} Top 10 List]]

[[Top 10 {{{year}}}-Sensitive Data Exposure|Sensitive Data Exposure →]]

PLEASE DELETE ME 

    <td style="font-size: 100%; font-weight: bold; background-color: #D9D9D9; color: #000000; border: 3px solid #444444">

Application / Business Specific </td> </tr> <tr valign="top"> 

    <td style="text-align: left; border: 3px solid #444444;">blank.</td>
    <td style="text-align: left; border: 3px solid #444444;">blank</td>
    <td colspan=2  style="text-align: left; border: 3px solid #444444;">blank</td>
    <td style="text-align: left; border: 3px solid #444444;">blank</td>
    <td style="text-align: left; border: 3px solid #444444;">blank</td>

</tr></table></center>

Am I Vulnerable To 'Security Misconfiguration'?

blank

How Do I Prevent 'Security Misconfiguration'?

blank

  1. blankBullet1
  2. blankBullet2
Example Attack Scenarios

blank

blank code

blank

http://example.com/app/accountView?id=' or '1'='1

blank

References

OWASP

External

[[Top 10 {{{year}}}-Insecure Direct Object References|← Insecure Direct Object References]]
[[Top 10 {{{year}}}-Table of Contents | {{{year}}} Table of Contents]]

[[Top_10_{{{year}}}-Top 10|{{{year}}} Top 10 List]]

[[Top 10 {{{year}}}-Sensitive Data Exposure|Sensitive Data Exposure →]]
© 2002-2013 OWASP Foundation This document is licensed under the Creative Commons Attribution-ShareAlike 3.0 license. Some rights reserved. CC-by-sa-3 0-88x31.png
[[Category:OWASP Top Ten {{{year}}} Project]]
Retrieved from "https://wiki.owasp.org/index.php?title=Top_10_2013-A5-Security_Misconfiguration&oldid=144734"