A library database listens on a wide network with weak privileged authentication. What finding class fits best?
Select an answer to reveal the explanation.
Short Explanation
A database open to half the campus with a soft admin login is a vault with the door propped open. Reachability plus weak auth is a classic high-impact combo. Lock down who can talk to it and how they prove who they are.
Full Explanation
Database engines often hold high-value data and accept powerful accounts. Binding them on broad networks with weak authentication creates a concentrated compromise path. Hardening includes network restriction, strong unique credentials, least privilege, and encrypted client connections. Assessors should prioritize this class because successful abuse frequently yields direct sensitive data access rather than only a foothold.