An internal staff member logs into an ERP platform and clicks on a record. The browser URL changes to: URL: http://192.168.0.100/ERP/accountId=5&action=SELECT Which of the following is the MOST likely vulnerability in this ERP platform?
A) Brute forcing of account credentials
B) Plain-text credentials transmitted over the Internet
C) Insecure direct object reference
D) SQL injection of ERP back end

Question

Quizplus · Accepted Answer

The URL contains a direct reference to an internal object (accountId=5), which suggests that the platform may be vulnerable to insecure direct object reference, allowing unauthorized access to data by manipulating the URL.

An Internal Staff Member Logs into an ERP Platform and Clicks