[Incident Handling and Response Process] Which of the following terms refers to vulnerable account management functions, including account update…

The term "broken account management" refers to vulnerabilities in the account management

functions of web applications, which can weaken valid authentication schemes. This can include

issues with how accounts are created, updated, managed, and deleted, as well as how users recover

forgotten passwords or perform password resets. Poorly implemented account management

functions can allow attackers to bypass authentication, elevate privileges, or assume the identity of

another user. This weakness is a significant security concern because it directly impacts the ability of

a system to safeguard user data and maintain operational integrity.

Reference:In its training materials, the ECIH v3 program addresses various web application

vulnerabilities, including broken account management, emphasizing the importance of secure

development practices and regular security assessments to prevent such issues.