Multiple choice technology security

After the appscan finished testing your web application you found that your password was changed to 1234. What do you think happened?

  1. Reset password functionality was invoked during the testing

  2. Change password form was submitted by appscan

  3. Somebody changed your password while the scan was running

  4. This is a result of an SQL injection test by appscan
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

AppScan automatically fills and submits forms during testing, including password change forms. When it encounters a password change form, it submits with auto-generated values like '1234', changing the actual password. This is normal testing behavior, not an attack. Solution: use a dedicated test account during scans.

Keep practicing — related questions