Which of the web application vulnerabilities was identified by Melanie in the above scenario?

Melanie, a professional hacker, is attempting to break into a target network through an application server. In this process, she identified a logic flaw in the target web application that provided visibility into the source code. She exploited this vulnerability to launch further attacks on the target web application.

Which of the web application vulnerabilities was identified by Melanie in the above scenario?
A . Insecure deserialization
B . Security misconfiguration
C . Command injection
D . Broken authentication

View Answer

Answer: B

Explanation:

Melanie discovered a logic flaw in the target web application that allowed her to view the source code. This flaw indicates a security misconfiguration, which can lead to further attacks. Security misconfigurations occur when an application or system is not properly configured, leaving it vulnerable to exploitation.

Reference: EC-Council Certified Security Specialist (E|CSS) documents and study guide12.