PWPP Practice Questions - TCM Security Practical Web Pentest Professional Exam

Access More Questions

A banking application transfers funds through a POST endpoint. Two simultaneous requests are sent to transfer the same $500 balance to different accounts. Both requests read the balance as $500 and proceed. This results in $1000 being transferred despite only $500 existing. What vulnerability class is this?

Race condition / TOCTOU vulnerability Insecure Direct Object Reference (IDOR) Mass assignment via unfiltered parameters Business logic flaw via parameter tampering

Correct Answer:

Race condition / TOCTOU vulnerability

Access more questions from this quiz

Continue to PWPP Practice Questions - TCM Security Practical Web Pentest Professional Exam for more practice questions and the full quiz experience.

Access More Questions