Confirmed users
651
edits
Security/QA/TestPlans/Web Authentication: Difference between revisions
Jump to navigation
Jump to search
m
Security/QA/TestPlans/Web Authentication (view source)
Revision as of 18:08, 3 October 2017
, 3 October 2017Fixed error
Mwobensmith (talk | contribs) m (Added status) |
Mwobensmith (talk | contribs) m (Fixed error) |
||
| Line 112: | Line 112: | ||
| RAC-1 || Incorrect authentication allows security bypass || TO-1, TO-2, TO-3 || 3-High || 1-Unlikely || 2-Moderate || 6 | | RAC-1 || Incorrect authentication allows security bypass || TO-1, TO-2, TO-3 || 3-High || 1-Unlikely || 2-Moderate || 6 | ||
|- | |- | ||
| RAC-2 || XSS/information leak || TO-1, TO-3 || 3-High || 1- | | RAC-2 || XSS/information leak || TO-1, TO-3 || 3-High || 1-Low || 1-Low || 3 | ||
|- | |- | ||
| RAC-3 || Confined to secure context || TO-1, TO-3 || 2-Moderate || 2-Possible || 1-Low || 4 | | RAC-3 || Confined to secure context || TO-1, TO-3 || 2-Moderate || 2-Possible || 1-Low || 4 | ||