1653
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1012 Cross Cutting 2427
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1006 Bad Coding Practices 2422
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Likelihood Of Exploit
High
Common Consequences
Scope Impact Likelihood
Confidentiality
Access Control
Availability
Other
Bypass Protection Mechanism
Gain Privileges or Assume Identity
Varies by Context
Attackers can bypass the security decision to access
whatever is being protected. The consequences will
depend on the associated functionality, but they can
range from granting additional privileges to untrusted
users to bypassing important security checks. Ultimately,
this weakness may lead to exposure or modification of
sensitive data, system crash, or execution of arbitrary
code.
CWE Version 4.14
CWE-807: Reliance on Untrusted Inputs in a Security Decision
CWE-807: Reliance on Untrusted Inputs in a Security Decision