2021 OWASP Top Ten: Broken Access Control

Coming in at number one and moving up from the fifth position from the 2017 list, 94% of tested applications were shown to have some form of broken access control. Notable Common Weakness Enumerations (CWEs) included are CWE-200: Exposure of Sensitive Information to an Unauthorized Actor, CWE-201: Exposure of Sensitive Information Through Sent Data, and CWE-352: Cross-Site Request Forgery. #OWASPTOP10
Video 2 / 11

⬇️⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️

DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems - together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

Your Community Evangelists:

[mohammedyaseerpasha]

one of the best explanations so far. Thanks, Man.

[pipersmom]

Is it possible to get F5's permission for us to convert the videos to MP4 for training our Devs?

[TannerLaMarche]

Hi, F5 DevCentral team. I have a copyright question. Since the information in this video is covered by the Creative Commons License 3.0, is this video, by nature, available to re-use in educational material my company distributes? I've been trying to find good video content covering OWASP Top 10 (instead of making it in-house) and came across your videos. I would like to know if we can redistribute your YouTube series as part of our product?

[lukethelabrador]

how is it different from SQL injection? *new to cyber security*

[CameronSpear]

This is a really important question: is this guy really good at writing backwards, or did you get a special mirrored shirt made just for these videos?

[patrickborys]

The only thing in my head hearing that is HOW T.F. do you write ? I mean is there somewhere and somehow a mirror that let you write like this ? Or do you simple practice to write like that :P?

[Double-NH]

Can you illustrate a bit about Record Ownership? What does it mean?