Which web application attack involves an attacker accessing, and potentially changing, serialized versions of data and objects?

Last Updated: Jun 9, 2022
IT Exam Items Repository › Category: DevNet › Which web application attack involves an attacker accessing, and potentially changing, serialized versions of data and objects?

Which web application attack involves an attacker accessing, and potentially changing, serialized versions of data and objects?

  • broken authentication
  • insecure deserialization
  • security misconfiguration
  • cross-site scripting

Explanation: An insecure deserialization attack occurs when an attacker gains access to, and potentially changes, serialized versions of data and objects. This attack can be mitigated by ensuring validation before deserializing objects.

Related exam: 6.6.2 Module 6: Application Deployment and Security Quiz

About The Author

ITExamAnswers Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.