Create two different unique demonstrations of Porous Defenses such as:

 

Missing Encryption of Sensitive Data, Use of Hard-coded Credentials, Missing Authorization, Missing Authentication for Critical Functions, Incorrect Permission Assignment for Critical Resources, Incorrect Authorization, Execution with Unnecessary Privileges, and Reliance on Untrusted Inputs in a Security Decision. 

 

Provide unique code that contains the vulnerability and then provide an updated version of the code that fixes the vulnerability. Also, describe why the original code was vulnerable and discuss specific attack methods a user could try to exploit the vulnerability. Finally, discuss how the new code fixes the vulnerability.

Answer rating: 100% (QA)

Demonstration 1 Missing Authentication in a Critical Function Code Review Scenario Imagine a web application that stores sensitive user data accessed through an API endpoint named getuserdata The API ... View the full answer