CWE-653Improper Isolation or Compartmentalization

Description

The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

Common consequences

• Access Control→Gain Privileges or Assume Identity,Bypass Protection Mechanism
  The exploitation of a weakness in low-privileged areas of the software can be leveraged to reach higher-privileged areas without having to overcome any additional obstacles, extending the scope of the damage to higher-privileged users..

Potential mitigations

• Architecture and Design
  Break up privileges between different modules, objects, or entities. Minimize the interfaces between modules and require strong access control between them.

Related CWEs

Recent CVEs classified under this CWE