Description

A functionality that is part of the system can be leveraged by an attacker in order to negatively impact it.

Impact

Change the password after the security code has been compromised.

Recommendation

Validate on the server side that the answers to the questions are correct.

Threat

Any customer of the organization authorized from the Internet.

Expected Remediation Time

⏱️ 60 minutes.

Requirements

Fixes