CWE-653Improper Isolation or Compartmentalization

Description

The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

When a weakness occurs in functionality that is accessible by lower-privileged users, then without strong boundaries, an attack might extend the scope of the damage to higher-privileged users.

Common consequences

• Access Control→Gain Privileges or Assume Identity,Bypass Protection Mechanism
  The exploitation of a weakness in low-privileged areas of the software can be leveraged to reach higher-privileged areas without having to overcome any additional obstacles.

Potential mitigations

• Architecture and Design
  Break up privileges between different modules, objects, or entities. Minimize the interfaces between modules and require strong access control between them.

Related CWEs

Recent CVEs classified under this CWE