PWPA

TCM Security Practical Web Pentest Associate (PWPA)

Authorization FlawsEnglish
Exam overview

Practice session

During a Burp Suite intercept session you notice the request: `GET /api/users/1234/profile`. You change `1234` to `1235` and receive another user's profile data. What vulnerability is this?

Loading your practice session…