An Investigation of Broken Access Control Types, Vulnerabilities, Protection, and Security

In the OWASP Top 10 Version 2021, the Broken Access Control is ranked first position. That means it is the most exploited vulnerability today by attackers. Because if the attacker can break the access control, he can take administrator privileges and compromise the entire web application. After that, he can launch any type of attack for his purpose. That was the cause of why it was most targeted. In this search, we will present the Broken Access Control vulnerability. First, we talk about its history and then present an overview. After that, we show some research related to our search. Then we reviewed the web application vulnerabilities that attackers may exploit to break the access control. Finally, we talk about protection and security that should be taken against attackers who exploit this vulnerability.