1. Home
2. All questions
3. Question 488

CISSP study material · question 488 of 500

An application checks for updates over HTTPS and installs whatever the endpoint returns without verifying a signature. What consequence does OWASP describe?

• Software security

1. The application would lose its ability to roll back to a prior version.
2. The update would fail to install because the transport check would reject it.
3. An attacker able to publish an update could have their own code distributed and run on every installation.
4. Only installations that had not previously updated would be affected.

Challenge yourself on this topic → Study as cards