Privilege Misuse
Privilege misuse arises when somebody uses rights they genuinely hold for actions they have no business reason to take. Unlike privilege escalation, the attacker or insider here does not have to acquire new authority. The trouble is that the existing authority is enough to do damage.
Term
description · examples · notesPrivilege misuse arises when somebody uses rights they genuinely hold for actions they have no business reason to take. Unlike privilege escalation, the attacker or insider here does not have to acquire new authority. The trouble is that the existing authority is enough to do damage.
Description
An administrator can read data they should not read, a finance user can start a transaction in their own favor, and technical staff can reach private mail, records or systems outside the scope of their work. The system often sees a valid account and a permitted action, but it does not see intent.
This threat is therefore not settled by asking who has access. It has to be known why they are reaching it, when, on what scale, and whether the behavior fits the work. A privilege without oversight is not a privilege but an open line of credit against trust.
Examples
- A database administrator reaches employee salary data with no business reason.
- IT staff read other employees' mail.
- A user with rights in the finance department creates or alters transactions in their own favor.
Notes
- A valid account does not mean a valid reason.
- Separation of duties, a review of rights and good records exist to close off the opportunity for authority to be misused.
Techniques
carried out with 3Techniques used to carry it out. Select one to open its page.
Defenses
countered by 5How it is defended against. Select one to open its page.