A cloud service accepts Security Assertion Markup Language (SAML) assertions from users to on and security However, an attacker was able to spoof a registered account on the network and query the SAML provider.
What is the MOST common attack leverage against this flaw?

Question

A cloud service accepts Security Assertion Markup Language (SAML) assertions from users to on and security However, an attacker was able to spoof a registered account on the network and query the SAML provider.

What is the MOST common attack leverage against this flaw?

Gerald Saraci · Accepted Answer

Attacker forges requests to authenticate as a different user.

Gerald Saraci · Answer

Attacker leverages SAML assertion to register an account on the security domain.

Gerald Saraci · Answer

Attacker conducts denial-of-service (DoS) against the security domain by authenticating as the same user repeatedly.

Gerald Saraci · Answer

Attacker exchanges authentication and authorization data between security domains.

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 1228 - CISSP discussion

Suggested answer: A

0 comments