OWASPASVS 5.0 requirement
ASVS-V7.5.3 The application requires further authentication with at least one factor or secondary verification before performing highly sensitive…
- Standard
- OWASP ASVS 5.0
- Chapter
- V7 Session Management
- Section
- V7.5 Defenses Against Session Abuse
- Level
- L3 (requirement applies from this verification level up)
Requirement
Verify that the application requires further authentication with at least one factor or secondary verification before performing highly sensitive transactions or operations.