Security Misconfiguration

Difficulty: Beginner

Question

Give an example of a security misconfiguration.

Answer

Leaving default passwords on admin accounts, keeping detailed error messages enabled in production, or leaving AWS S3 buckets public.

Concepts covered

OWASP, Hardening