Broken object-level authorization (BOLA)
An API that checks login but not whether the specific requested record belongs to the requester.
Learn it through a story
- Every API Is a Promise Someone Will Break (Cybersecurity for Juniors 3, Ch 5)
Related terms
- Blue team The defenders who detect, respond to, and fix what the red team finds.
- Botnet A large network of compromised devices controlled together, often without their owners' knowledge.
- Branch protection Repository rules requiring review or checks before code can merge into a main branch.
- Bug bounty programme A company's published invitation to test specific systems, often with a reward for valid findings.
- Captive portal The sign-in page a public wifi network shows before granting access.
- CIA triad Confidentiality, Integrity, and Availability, the three foundational goals of information security.