What specific vulnerability in Equifax's systems was exploited during the data breach?

Question

BlackTom AI · Accepted Answer

To tackle this question, we assess each proposed vulnerability in the context of the widely publicized Equifax breach.
Option 1: Zero-day exploit. A zero-day implies exploiting a previously unknown vulnerability. While the attackers did leverage an internet-facing vulnerability, the root cause was a known vulnerability in a specific software component, not a brand-new, undisclosed bug at the time. So describing the breach as a generic zero-day vulnerability is misleading.
Option 2: SQL injection. SQL injection attacks target databases through improperly sanitized input, allowing attackers to manipulate queries. The Equifax incident did not hinge on leaking or tampering with databases via SQL injection, but rather on exploiting a flaw in a web framework to achieve remote code execution. Thus this option misidentifies the vector.
Option 3: Apache Struts vulnerability. The breach was triggered by a known remote code execution flaw in Apache Struts (the CVE-2017-5638 class of vulnerability) that allowed attackers to execute code on Equifax’s servers. This aligns with the documented breach vector and the exploited software stack used by Equifax.
Option 4: Cross-site scripting (XSS). XSS involves injecting scripts into webpages viewed by other users, typically affecting client-side browser contexts. The Equifax incident was not initiated by an XSS flaw that tricked users into executing malicious scripts, but by server-side exploitation of a Struts vulnerability to gain control of the host.
In summary, the most accurate depiction among the choices is the exploitation of an Apache Struts vulnerability, which aligns with the known breach vector and the affected software stack.

BU.330.730.T2.SU25 M3 Quiz

What specific vulnerability in Equifax's systems was exploited during the data breach?

View Explanation

Log in for full answers

Similar Questions

In a consumer society, many adults channel creativity into buying things

Economic stress and unpredictable times have resulted in a booming industry for self-help products

People born without creativity never can develop it

A product has a selling price of $20, a contribution margin ratio of 40% and fixed cost of $120,000. To make a profit of $30,000. The number of units that must be sold is: Type the number without $ and a comma. Eg: 20000

Which of the following statement regarding cost is correct:

Under the assumptions used in cost-volume-profit analysis, as the activity increases:

The CVP and break-even analysis are supported by a range of important assumptions. Which of the following is not an assumption of the CVP:

The break-even point is that at which:

More Practical Tools for Students Powered by AI Study Helper

Homework AI Solver

Stylized AI Paper Writer

Plagiarism Checker Assistant

Citation AI Academic Writing Tool

In-Class Translation Assistant

AI Note Generator

AI Quiz Answers

Past Exam Questions from University Test Bank

Smart Practice Assistant

Adaptive Practice

Making Your Study Simpler