CWE-1296Incorrect Chaining or Granularity of Debug Components

Description

Common consequences· 1

• Confidentiality / Integrity / Access Control / Authentication / Authorization / Availability / Accountability — Gain Privileges or Assume Identity, Bypass Protection Mechanism, Execute Unauthorized Code or Commands, Modify Memory, Modify Files or Directories
  Depending on the access to debug component(s) erroneously granted, an attacker could use the debug component to gain additional understanding about the system to further an attack and/or execute other commands. This could compromise any security property, including the ones listed above.

Potential mitigations· 1

• [Implementation]Ensure that debug components are properly chained and their granularity is maintained at different authentication levels.

Related CAPEC attack patterns· 2

Exploits (incoming)2

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.