Authentication mechanism absence or evasion - Admin Console
Description
Some functions of the application can be accessed without having to be logged into the server. Some only allow you to view and others, to edit some values.
Impact
- List confidential information in the application. - Edit information in the application.
Recommendation
Protect resources that are not authenticated for access.
Threat
Unauthorized user from internal network.
Expected Remediation Time
⏱️ 60 minutes.