Multiple choice technology security

After the appscan finished testing your web application you found that your password was changed to 1234. What do you think happened?

  1. Reset password functionality was invoked during the testing

  2. Change password form was submitted by appscan

  3. Somebody changed your password while the scan was running

  4. This is a result of an SQL injection test by appscan
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

AppScan systematically tests all forms including password change functionality, so it submitted the change password form during automated testing. This is not an attack but rather AppScan exercising the application's functionality, which is why testing should be done against non-production environments.

AI explanation

AppScan crawls and submits every form it discovers, including change-password forms, using its test payloads — so a password ending up reset to 1234 is a side effect of AppScan actually submitting that form during automated testing, not a real security incident or someone else's action. This is a well-known caveat when scanning apps that have live account-management functionality.

Keep practicing — related questions