OWASPASVS 5.0 requirement

ASVS-V13.2.2 Communications between backend application components, including local or operating system services, apis, middleware, and data layers, are…

L2 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V13 Configuration
Section
V13.2 Backend Communication Configuration
Level
L2 (requirement applies from this verification level up)

Requirement

Verify that communications between backend application components, including local or operating system services, APIs, middleware, and data layers, are performed with accounts assigned the least necessary privileges.