1782
Scope Impact Likelihood
accessing insufficiently-protected, privileged functionality to
write the data.
Access Control Gain Privileges or Assume Identity
Bypass Protection Mechanism
An attacker could gain privileges by modifying or
reading critical data directly, or by accessing privileged
functionality.
Detection Methods
Automated Static Analysis
Automated static analysis is useful for detecting commonly-used idioms for authorization. A tool
may be able to analyze related configuration files, such as .htaccess in Apache web servers,
or detect the usage of commonly-used authorization libraries. Generally, automated static
analysis tools have difficulty detecting custom authorization schemes. In addition, the software's
design may include some functionality that is accessible to any user and does not require an
authorization check; an automated technique that detects the absence of authorization may
report false positives.
Effectiveness = Limited
Automated Dynamic Analysis
Automated dynamic analysis may find many or all possible interfaces that do not require
authorization, but manual analysis is required to determine if the lack of authorization violates
business logic.
Manual Analysis
This weakness can be detected using tools and techniques that require manual (human)
analysis, such as penetration testing, threat modeling, and interactive tools that allow the
tester to record and modify an active session. Specifically, manual static analysis is useful for
evaluating the correctness of custom authorization mechanisms.
Effectiveness = Moderate
These may be more effective than strictly automated techniques. This is especially the case with
weaknesses that are related to design and business rules. However, manual efforts might not
achieve desired code coverage within limited time constraints.
Manual Static Analysis - Binary or Bytecode
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Binary / Bytecode disassembler - then use manual analysis for vulnerabilities &
anomalies
Effectiveness = SOAR Partial
Dynamic Analysis with Automated Results Interpretation
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Web Application Scanner Web Services Scanner Database Scanners
Effectiveness = SOAR Partial
Dynamic Analysis with Manual Results Interpretation
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Host Application Interface Scanner Fuzz Tester Framework-based Fuzzer
Effectiveness = SOAR Partial
Manual Static Analysis - Source Code
CWE Version 4.14
CWE-862: Missing Authorization
CWE-862: Missing Authorization