AUTHORIZATION (AZK)
Ryan can influence or alter authorization controls and permissions, and can therefore bypass them
Ryan can influence or alter authorization controls and permissions, and can therefore bypass them
OWASP SCP
77,89,91
OWASP ASVS
4.1.1,4.1.2,10.2.3,10.2.4,10.2.5,10.2.6
OWASP AppSensor
CAPEC
-
SAFECODE
8,10,11
Use only trusted system objects, e.g. server side session objects, for making access authorization decisions. Restrict access to user and data attributes and policy information used by access controls. Server side implementation and presentation layer representations of access control rules must match.
Mappings
OWASP ASVS (4.0): 4.1.1 ,4.1.2 ,10.2.3 ,10.2.4 ,10.2.5 ,10.2.6
OWASP SCP: 77,89,91
OWASP Appsensor:
Safecode: 8,10,11
ASVS (4.0) Cheatsheetseries Index
ASVS V4.1 - General Access Control Design
ASVS V10.2 - Malicious Code Search
No suitable mappings were found.
