Ravi Sir's Cyber Security Cards › Interview Cards
Broken access control / IDOR mainly means:
Broken access control / IDOR mainly means: A. CSS colour wrong B. Users can reach other users’ objects by changing an identifier without authZ checks C. Disk full D. NTP drift B. Users can reach other users’ objects by changing an identifier without authZ checks IDOR means the server does not check
Read card text
What this card says
Options
A. CSS colour wrong
B. Users can reach other users’ objects by changing an identifier without authZ checks
C. Disk full
D. NTP drift
Correct answer
B. Users can reach other users’ objects by changing an identifier without authZ checks
Why
IDOR means the server does not check ownership, so a user can reach another user's data just by changing an id in the request.
Learn more in the lesson: 48.7 CEH-Style Practice Questions – Set B (Modules 11–20)