Description
The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.
Potential Impact
- Access Control: Gain Privileges or Assume Identity
How to Fix
Architecture and Design
Break up privileges between different modules, objects, or entities. Minimize the interfaces between modules and require strong access control between them.
Detection Methods
- Automated Static Analysis - Binary or Bytecode: According to SOAR, the following detection techniques may be useful:
Cost effective for partial coverage:
Co...
- Manual Static Analysis - Source Code: According to SOAR, the following detection techniques may be useful:
Highly cost effective:
Manual Source Co...
- Architecture or Design Review: According to SOAR, the following detection techniques may be useful:
Highly cost effective:
Inspection (IEEE...
Related Weaknesses
References
View on MITRE CWE Database →
