Issue Details
Improper Assets Management
api09-2019 • Rank #9 in OWASP 2023
Explanation
Improper asset management means organizations lose track of exposed API versions, undocumented routes, sandbox environments, and deprecated endpoints. Attackers target forgotten APIs with weaker controls or stale dependencies. The risk expands during rapid releases when governance cannot keep pace with service sprawl and shadow deployments.
Remedy
Maintain authoritative inventory for all API assets, versions, and environments. Require API registration before deployment and enforce documented ownership and lifecycle status. Retire obsolete versions on schedule, monitor for unknown endpoints, and block internet exposure of unmanaged or unsupported interfaces.
| Year | Rank | Category |
|---|---|---|
| 2019 | #9 | api09-2019 - Improper Assets Management |