The security of academic information systems is essential to maintaining the confidentiality, integrity, and availability of academic data. This study aims to identify web application vulnerabilities in an academic information system using the OWASP framework. Vulnerability testing identified three main findings: NGINX server misconfigurations, potential exposure of sensitive files, and the need to strengthen authentication and access controls. The identified misconfigurations and potential file exposure indicate security risks that require further verification to determine their actual exploitability and impact. Recommended mitigation measures include correcting server configurations, strengthening authentication mechanisms, and restricting unauthorized access. These findings highlight the importance of systematic vulnerability assessment and appropriate security controls to improve the protection and reliability of academic information systems.
Copyrights © 2024