[Handling and Responding to Web Application Attacks] Clark, a professional hacker, exploited the web application of a target organization by…

The vulnerability exploited by Clark through tampering with form and parameter values to gain

unauthorized access to information assets is indicative of Broken Access Control. Broken Access

Control vulnerabilities occur when a web application does not properly enforce restrictions on what

authenticated users are allowed to do. Attackers can exploit these vulnerabilities to access

unauthorized functionality or data, such as accessing other users' accounts, viewing sensitive files,

and modifying other users’ data.