2225
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1011 Authorize Actors 2425
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1212 Authorization Errors 2476
Weakness Ordinalities
Primary :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Alternate Terms
Separation of Privilege : Some people and publications use the term "Separation of Privilege" to
describe this weakness, but this term has dual meanings in current usage. This node conflicts with
the original definition of "Separation of Privilege" by Saltzer and Schroeder; that original definition
is more closely associated with CWE-654. Because there are multiple interpretations, use of the
"Separation of Privilege" term is discouraged.
Common Consequences
Scope Impact Likelihood
Access Control Gain Privileges or Assume Identity
Bypass Protection Mechanism
CWE Version 4.14
CWE-653: Improper Isolation or Compartmentalization
CWE-653: Improper Isolation or Compartmentalization