Examkin

Question

Difficulty: Very hardHost, Network, and Architecture Vulnerabilities

A security analyst reviews a network packet capture taken from an internal segment connecting an administrative system to an embedded host management interface. The packet capture reveals the following HTTP request:

GET /api/v1/system/status?session_token=9f8e7d6c5b4a3210 HTTP/1.1
Host: 10.20.30.50:8080
User-Agent: EnterpriseAdminConsole/3.4
Accept: */*

A subsequent vulnerability assessment confirms that the embedded host management server lacks Transport Layer Security (TLS) support and processes cleartext HTTP requests. Which of the following represents the primary host and network vulnerability exposed in this scenario?

  1. Unencrypted transmission of sensitive session tokens combined with credential exposure in URI query parametersAnswer
  2. B
    Implicit reliance on perimeter network firewalls to protect internal segment communications without requiring transport security
  3. C
    Cross-site scripting (XSS) vulnerability resulting from unsanitized database query parameters executed in the client browser
  4. D
    Absence of perimeter-level stateless firewall rules to block inbound management port traffic at the external boundary

Answer

The primary vulnerability is the unencrypted transmission of sensitive session tokens over cleartext HTTP combined with credential exposure in URI query parameters.
The correct answer accurately identifies the root vulnerability shown in the packet capture: transmitting sensitive session tokens across an unencrypted transport layer (HTTP over TCP/8080) while simultaneously exposing those tokens inside the URI query string where they can be intercepted or logged.

Step-by-Step Solution

1
Analyze the log snippet and host configuration.
The HTTP GET request reveals `session_token=9f8e7d6c5b4a3210` passed directly in the URL over plain HTTP (port 8080) without TLS encryption.
Cleartext transport allows network eavesdropping (man-in-the-middle attacks), while URI query parameters are regularly recorded in access logs, referrer headers, and browser histories.
2
Identify the underlying host and network vulnerability.
The combination of cleartext protocol usage and insecure credential placement in the request line exposes sensitive authentication tokens.
Host services accepting plain HTTP for administrative actions expose credentials and session integrity to network-level interception.
3
Evaluate candidate answer choices against the observed vulnerability.
The choice identifying unencrypted transmission and URI query token exposure directly accurately pinpoints the root cause.
Other choices either confuse architectural design assumptions (Zero Trust reliance), misclassify web application attack vectors (XSS), or propose ineffective boundary mitigations.

Key Concept

Host and Network Infrastructure Vulnerabilities - Cleartext Protocols and Insecure Data Transmission
Rate this question

Topics

Host, Network, and Architecture Vulnerabilities