644
Notes
Maintenance
Note: there are 2 separate sub-categories here: - privilege incorrectly allows entities to perform
certain actions - object is incorrectly accessible to entities with a given privilege
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Unsafe Privilege
Related Attack Patterns
CAPEC-ID Attack Pattern Name
58 Restful Privilege Elevation
634 Probe Audio and Video Peripherals
637 Collect Data from Clipboard
643 Identify Shared Files/Directories on System
648 Collect Data from Screen Capture
References
[REF-76]Sean Barnum and Michael Gegick. "Least Privilege". 2005 September 4. < https://
web.archive.org/web/20211209014121/https://www.cisa.gov/uscert/bsi/articles/knowledge/
principles/least-privilege >.2023-04-07.
CWE-268: Privilege Chaining
Weakness ID : 268
Structure : Simple
Abstraction : Base
Description
Two distinct privileges, roles, capabilities, or rights can be combined in a way that allows an entity
to perform unsafe actions that would not be allowed without that combination.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 269 Improper Privilege Management 646
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1011 Authorize Actors 2425
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 265 Privilege Issues 2316
Weakness Ordinalities
Primary :
Applicable Platforms
CWE Version 4.14
CWE-268: Privilege Chaining
CWE-268: Privilege Chaining