Which of the following is not a direct threat to access control mechanisms?

A

Man$-$in$-$the$-$middle

Dictionary

C

Cross$-$site scripting

Phishing