B - Production Support » BSN CDB Support

At the time of assessment, LGMS security team successfully bypassed the application's local biometric authentication to gain access to sensitive data as an unauthenticated user.

Attackers can easily bypass local biometric authentication if no data returns from the authentication process. Additionally, the lack of enforcement of authentication at the remote endpoint allows attackers to bypass local authentication and query data from the remote endpoint directly.

Action Plan:
To check on session table
(Table : bib user security)