easy
Single Answer
0Alekos is analyzing an attack against his company in which the attacker found comments embedded in HTML code that provided the clues needed to exploit a software vulnerability. Using the STRIDE model, what type of attack did he uncover?
Answer Options
A
Spoofing
B
Repudiation
C
Information disclosure
D
Elevation of privilege
Correct Answer: C
Explanation
Information disclosure attacks rely upon the revelation of private, confidential, or controlled information. When the attacker examined the HTML code and discovered sensitive information, this was an example of an information disclosure attack, as the attacker gained information they should not have been privy to.