OWASPASVS 5.0 requirement
ASVS-V6.6.2 Out-of-band authentication requests, codes, or tokens are bound to the original authentication request for which they were generated and…
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.6 Out-of-Band authentication mechanisms
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that out-of-band authentication requests, codes, or tokens are bound to the original authentication request for which they were generated and are not usable for a previous or subsequent one.