Business logic vulnerabilities

• Excessive trust in client-side controls

• High-level logic vulnerability

• Inconsistent security controls

• Flawed enforcement of business rules