CWE-269: Improper Privilege Management

Description

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Abstraction: ClassAn abstract weakness, independent of any specific language or technology.
Likelihood of exploit: Medium
Status: Draft

Architecture and DesignOperation
Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
Architecture and DesignSeparation of Privilege
Follow the principle of least privilege when assigning access rights to entities in a software system.
Architecture and DesignSeparation of Privilege
Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.

Potential mitigations

Architecture and DesignOperation

Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.

Architecture and DesignSeparation of Privilege

Follow the principle of least privilege when assigning access rights to entities in a software system.

Architecture and DesignSeparation of Privilege

Consider following the principle of separation of privilege. Require multiple conditions to be met before permitting access to a system resource.