1999
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1212 Authorization Errors 2476
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Availability
Access Control
Modify Memory
Read Memory
Execute Unauthorized Code or Commands
Gain Privileges or Assume Identity
Bypass Protection Mechanism
Other
High
Potential Mitigations
Phase: Architecture and Design
Phase: Implementation
Phase: Testing
CWE Version 4.14
CWE-1220: Insufficient Granularity of Access Control
CWE-1220: Insufficient Granularity of Access Control