BOLA Risk Mitigation Strategies - White Paper

In this white paper

APIs tend to expose endpoints that handle object identifiers, creating a wide attack surface Level Access Control issue. Broken Object-Level Authorization (BOLA) checks should be considered in every function that accesses a data source using input from the user.

This white paper examines:

• Why BOLA is considered the #1 risk on the OWASP Top 10 list
• The causes of BOLA API risks
• The difficulty in detecting and fixing BOLA risks
• Recommendations for securing APIs