Multiple choice technology security

Hardcoded credentials in the source code which are checked prior to the normal authentication process is an example of which of the following

  1. A backdoor

  2. An access control vulnerability

  3. A buffer over flow

  4. A SQL injection vulnerability
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Hardcoded credentials that bypass normal authentication are a backdoor because they provide secret access without legitimate credentials. This is different from access control vulnerabilities (B) which are flaws in permission logic. Buffer overflow (C) and SQL injection (D) are completely different vulnerability types involving memory corruption and query manipulation.

AI explanation

To answer this question, you need to understand the concept of hardcoded credentials and the different types of vulnerabilities.

Option A) A backdoor - This option is correct because hardcoded credentials in the source code can create a hidden entry point or bypass normal authentication processes, allowing unauthorized access to a system or application.

Option B) An access control vulnerability - This option is incorrect. Access control vulnerabilities refer to issues with the enforcement of access restrictions, such as weak or misconfigured access control mechanisms. Hardcoded credentials are not related to access control vulnerabilities.

Option C) A buffer overflow - This option is incorrect. Buffer overflow vulnerabilities occur when a program writes data beyond the allocated buffer, which can lead to system crashes or allow an attacker to execute arbitrary code. Hardcoded credentials are not related to buffer overflow vulnerabilities.

Option D) A SQL injection vulnerability - This option is incorrect. SQL injection vulnerabilities occur when an attacker is able to insert malicious SQL code into a query, allowing them to manipulate or extract data from a database. Hardcoded credentials are not related to SQL injection vulnerabilities.

The correct answer is A) A backdoor. This option is correct because hardcoded credentials can create a hidden entry point or bypass normal authentication processes, allowing unauthorized access to a system or application.

Keep practicing — related questions