CAPEC-233 Privilege Escalation

CAPEC ID: 233

CAPEC-233 Metadata

Likelihood of Attack

Medium

Typical Severity

High

Overview

Summary

An adversary exploits a weakness enabling them to elevate their privilege and perform an action that they are not supposed to be authorized to perform.

Prerequisites

No prerequisites listed.

Potential Solutions / Mitigations

No specific solutions listed.

Related Weaknesses (CWE)

CWE ID Description
CWE-269 Improper Privilege Management
CWE-1264 Hardware Logic with Insecure De-Synchronization between Control and Data Channels
CWE-1311 Improper Translation of Security Attributes by Fabric Bridge

Taxonomy Mappings

Taxonomy: ATTACK

Entry ID Entry Name
1548 Abuse Elevation Control Mechanism

Stay Ahead of Attack Patterns

Understanding CAPEC patterns helps security professionals anticipate and thwart potential attacks. Leverage these insights to enhance threat modeling, strengthen your software development lifecycle, and train your security teams effectively.