🎴 Flashcard Mode
Web Application Security Fundamentals
Card1 / 16
Mastered0
Review0
QuestionClick to flip
User has used a computer in Cyber Café and has forgot to logout. Attacher comes and uses the same browser to work on the same Web Application. This kind of Scenarios come under:
AnswerClick to flip back
A
Broken Authentication and Session Management
💡 Explanation:
This scenario is a classic example of Broken Authentication and Session Management - the user failed to properly terminate their session (logout), allowing an attacker to hijack the authenticated session. The vulnerability is that session identifiers remained valid and accessible, enabling the attacker to impersonate the legitimate user without re-authenticating. This differs from authorization issues (A), security misconfiguration (C), or CSRF (D).