Skip to content

96 - What type of attack is demonstrated in thi.md

Latest commit

聽

History

History
36 lines (21 loc) 路 1.53 KB

96 - What type of attack is demonstrated in thi.md

File metadata and controls

36 lines (21 loc) 路 1.53 KB
Raw

========== Question ==========

What type of attack is demonstrated in this scenario?

Components typically run with the same privileges as the application itself, so flaws in any component can result in serious impact. Such flaws can be accidental (e.g., coding error) or intentional (e.g., a backdoor in a component). Some example exploitable component vulnerabilities discovered are:

  • CVE-2017-5638, a Struts 2 remote code execution vulnerability that enables the execution of arbitrary code on the server, has been blamed for significant breaches.

  • While the internet of things (IoT) is frequently difficult or impossible to patch, the importance of patching them can be great (e.g., biomedical devices).

There are automated tools to help attackers find unpatched or misconfigured systems. For example, the Shodan IoT search engine can help you find devices that still suffer from Heartbleed vulnerability patched in April 2014.

========== Answer ==========

A06 Vulnerable and Outdated Components

========== Id ==========
96

DECK INFO

TARGET DECK: Web Security::OWASP Top 10::OAOT - Anki owasp top 10 - owasp::Part VII - A06 2021-Vulnerable and Outdated Components::Chapter 3 - Example Attack Scenarios

FILE TAGS: #OWASP::#OWASP-Top-10::#Web-Security::#OAOT-Anki-owasp-top-10-owasp::#Part-VII-A06-2021-Vulnerable-and-Outdated-Components::#Chapter-3-Example-Attack-Scenarios::#96-What-type-of-attack-is-demonstrated-in-thi

Reference:

Related:

LIST
where file.name = this.file.name

QUESTION STATUS: Safe to store