[Test] Exposed Internal Admin Panel — Simple Access Control Review

Step 1

intro

Brief: Exposed Internal Admin Panel

You are the technical security architect for BrightPath Freight, a small logistics company. A warehouse-management admin panel was found reachable from the general corporate network with no login requirement — anyone on the network can view and edit shipment records. This is a short practice scenario for testing the admin module; most of the work is one design step plus a short write-up.

How do you want to begin?