CWE-653
Overview
- CWE ID
- 653
- CWE Name
- Improper Isolation or Compartmentalization
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.
Extended Description
When a weakness occurs in functionality that is accessible by lower-privileged users, then without strong boundaries, an attack might extend the scope of the damage to higher-privileged users.