Multiple choice general knowledge science & technology

Which is the Valid Scenario of Broken Authentication and Session Management.

  1. User able to access the page which he/she is not Authorised.

  2. Exposing Authentication/Session details as part of URL

  3. Sending Financial Data request as part of the request URL.

  4. None of the Above
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Exposing session IDs or authentication credentials in URLs (B) is a valid scenario of Broken Authentication and Session Management. URLs get logged in browser history, server logs, and referrer headers - exposing sensitive authentication data in URLs allows attackers to capture session identifiers. Option (A) describes an authorization issue, (C) is about data exposure, and (B) is the correct authentication/session management vulnerability.

Keep practicing — related questions