CWE-1267 Policy Uses Obsolete Encoding

The product uses an encoding mechanism that is no longer trusted, i.e., an obsolete encoding, to implement access controls.

• Confidentiality, Integrity, Availability, Access Control: Modify Memory, Read Memory, Modify Files or Directories, Read Files or Directories, DoS: Resource Consumption (Other), Execute Unauthorized Code or Commands, Gain Privileges or Assume Identity, Bypass Protection Mechanism, Reduce Reliability

• [Architecture and Design, Implementation] Security Token Decoders should be reviewed for design inconsistency and common weaknesses. Access and programming flows should be tested in both pre-silicon and post-silicon testing.