CAPECattack pattern

CAPEC-233 Privilege Escalation

Official page ↗
Abstraction
Meta
Status
Draft
CAPEC version
3.9

Description

An adversary exploits a weakness enabling them to elevate their privilege and perform an action that they are not supposed to be authorized to perform.

Related

Att&ck technique · MITRE ATT&CK (1)

  • T1548 Abuse Elevation Control Mechanism technique

Weakness · CWE (3)

  • CWE-1264 Hardware Logic with Insecure De-Synchronization between Control and Data Channels weakness
  • CWE-1311 Improper Translation of Security Attributes by Fabric Bridge weakness
  • CWE-269 Improper Privilege Management weakness

Referenced by CAPEC · can precede (1)

  • CAPEC-17 Using Malicious Files attack pattern

Referenced by CAPEC · child of (5)

  • CAPEC-104 Cross Zone Scripting attack pattern
  • CAPEC-234 Hijacking a privileged process attack pattern
  • CAPEC-30 Hijacking a Privileged Thread of Execution attack pattern
  • CAPEC-68 Subvert Code-signing Facilities attack pattern
  • CAPEC-69 Target Programs with Elevated Privileges attack pattern

Referenced by CWE · attack pattern (3)

  • CWE-1264 Hardware Logic with Insecure De-Synchronization between Control and Data Channels weakness
  • CWE-1311 Improper Translation of Security Attributes by Fabric Bridge weakness
  • CWE-269 Improper Privilege Management weakness