Issue name

Broken access control

Typical severity

Information

Issue description

Access control is the application of constraints on who or what is authorized to perform actions or access resources.

Broken access controls often present a serious security vulnerability as they can allow attackers to access resources or perform actions they should not be able to.

Issue remediation

If this endpoint is intended to be restricted to authenticated users, implement access controls that enforce this.

References

Vulnerability classifications

Web intro