CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Official CWE-284 definition at MITREVulnerabilities
How this weakness shows up in real applications - with how it works, impact, and remediation:
Related weaknesses
Impactr finds and proves weaknesses like CWE-284 in your web apps and APIs - investigating, chaining, and validating each with a reproducible exploit.
Join the waitlist