CAPEC-58 Restful Privilege Elevation
abstraction: detailedstatus: activeAn adversary identifies a Rest HTTP (Get, Put, Delete) style permission method allowing them to perform various malicious actions upon server data due to lack of access control mechanisms implemented within the application service accepting HTTP messages.
likelihood: Highseverity: High
01
weaknesses (2)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (2)
Related entries.
03
source
Where this definition is published.