Weakness (CWE)
CWE-1268: Policy Privileges are not Assigned Consistently Between Control and Data Agents
Base Draft
The product's hardware-enforced access control for a particular resource improperly accounts for privilege discrepancies between control and write policies.
How to prevent it (1 mitigation)
-
Architecture and Design, Implementation
Access-control-policy definition and programming flow must be sufficiently tested in pre-silicon and post-silicon testing.
Source: MITRE CWE-1268
0 results · Clear filters · Feed
Nothing found.