QuestionQ201

VerifiedCloud Application Security

Which of the following threat types involves an application that fails to validate authorization for parts of itself after the initial checks?

Explanation

Missing function-level access control occurs when an application exposes functionality without enforcing authorization each time that function is accessed. OWASP identifies this as broken function-level authorization and recommends authorization checks for every function.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!