CWE-653: Improper Isolation or Compartmentalization

MITRE CWE weakness

Description

The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.

When a weakness occurs in functionality that is accessible by lower-privileged users, then without strong boundaries, an attack might extend the scope of the damage to higher-privileged users.

Common consequences

• Access Control: Gain Privileges or Assume Identity, Bypass Protection Mechanism

Mitigations

Architecture and Design — Break up privileges between different modules, objects, or entities. Minimize the interfaces between modules and require strong access control between them.

References

• CWE page: https://cwe.mitre.org/data/definitions/653.html
• CWE list: https://cwe.mitre.org/data/index.html