@@ -1204,8 +1204,8 @@ The assessment criteria for each security requirements are described in a struct
- If the account is not authorized to, attempt to modify configuration data
- VERDICT:
SUCCESS if only correct identification and authentication allows access to the specific rights of a user profile, and only authorized users may read or modify stored data or configuration data.
FAIL if unauthorized access or incorrect rights assignment is detected.
SUCCESS: if only correct identification and authentication allows access to the specific rights of a user profile, and only authorized users may read or modify stored data or configuration data, or perform protected actions.
FAIL: if unauthorized access or incorrect rights assignment is detected.
- EVIDENCE:
- Results of identification and authentication attempts (successful and failed).
@@ -1227,7 +1227,7 @@ The assessment criteria for each security requirements are described in a struct
- Systematically try all possible combinations of usernames, passwords, or other credentials to attempt unauthorized access.
- VERDICT:
- SUCCESS: If only correct identification and authentication allows access to the specific rights of a user profile, and only authorized users may read or modify stored data or configuration data.
- SUCCESS: No unauthorized users may read or modify stored data or configuration data, or perform protected actions.
- FAIL: If unauthorized access or incorrect rights assignment is detected.
