CWE-1311 Improper Translation of Security Attributes by Fabric Bridge

The fabric bridge incorrectly translates security attributes from either trusted to untrusted or from untrusted to trusted when converting from one fabric protocol to another.

A weakness can arise if the bridge IP block, which translates the signals from the protocol used in the IP block endpoint to the protocol used by the central bus, does not properly translate the security attributes.

• Confidentiality, Integrity, Access Control: Modify Memory, Read Memory, Gain Privileges or Assume Identity, Bypass Protection Mechanism, Execute Unauthorized Code or Commands — The identity of the initiator could be translated from untrusted to trusted or vice-versa. This could result in access-control bypass, privilege escalation, or denial of service.

• [Architecture and Design] The translation must map signals in such a way that untrusted agents cannot map to trusted agents or vice-versa. • [Implementation] Ensure that the translation maps signals in such a way that untrusted agents cannot map to trusted agents or vice-versa.