OWASPASVS 5.0 requirement
ASVS-V7.5.1 The application requires full re-authentication before allowing modifications to sensitive account attributes which may affect…
- Standard
- OWASP ASVS 5.0
- Chapter
- V7 Session Management
- Section
- V7.5 Defenses Against Session Abuse
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that the application requires full re-authentication before allowing modifications to sensitive account attributes which may affect authentication such as email address, phone number, MFA configuration, or other information used in account recovery.