AUTHENTICATION (ATX)
Pravin can bypass authentication controls because a centralized standard, tested, proven and approved authentication module/framework/service, separate to the resource being requested, is not being used
Pravin can bypass authentication controls because a centralized standard, tested, proven and approved authentication module/framework/service, separate to the resource being requested, is not being used
OWASP SCP
25,26,27
OWASP ASVS
1.1.6,1.4.4
OWASP AppSensor
CAPEC
-
SAFECODE
14,28
Centralized authentication routines are a good programming practice, but like other routines, developers need to understand how they work, how to use them and any limitations. These should preferably be the framework's in-built authentication support. I If third party authentication libraries are used, it is important to test each routine before its implementation.
Mappings
OWASP ASVS (4.0): 1.1.6 ,1.4.4
OWASP SCP: 25,26,27
OWASP Appsensor:
Safecode: 14,28
ASVS (4.0) Cheatsheetseries Index
ASVS V1.1 - Secure Software Development Lifecycle Requirements
ASVS V1.4 - Access Control Architectural Requirements
No suitable mappings were found.
