8 9 10 J Cornucopia Cornucopia Cornucopia Cornucopia David can bypass the application Michael can bypass the Xavier can circumvent the Roman can exploit the to gain access to data because the application to gain access to data application's controls because application because it was network and host infrastructure, because administrative tools or code frameworks, libraries and compiled using out-of-date tools, and supporting administrative interfaces are not components contain malicious or its configuration is not secure services/applications, have not secured adequately code or vulnerabilities (e.g. by default, or security been securely configured, the commercial off the shelf, information was not documented configuration rechecked outsourced, open source, and passed on to operational periodically and security patches externally-located) teams applied, or the data is stored locally, or the data is not physically protected Q K Joker Joker
Cornucopia 8 Cornucopia 9 Cornucopia 10 Cornucopia J David can bypass the application to gain access to data because the network and host infrastructure, and supporting services/applications, have not been securely configured, the configuration rechecked periodically and security patches applied, or the data is stored locally, or the data is not physically protected Michael can bypass the application to gain access to data because administrative tools or administrative interfaces are not secured adequately Xavier can circumvent the application's controls because code frameworks, libraries and components contain malicious code or vulnerabilities (e.g. commercial off the shelf, outsourced, open source, externally-located) Roman can exploit the application because it was compiled using out-of-date tools, or its configuration is not secure by default, or security information was not documented and passed on to operational teams Q K Joker Joker
OWASP-Cornucopia-Ecommerce_Website.docx