Weakness (CWE)
CWE-556: ASP.NET Misconfiguration: Use of Identity Impersonation
Variant Incomplete
Configuring an ASP.NET application to run with impersonated credentials may give the application unnecessary privileges.
How to prevent it (1 mitigation)
-
Architecture and Design
Use the least privilege principle.
Source: MITRE CWE-556
0 results · Clear filters · Feed
Nothing found.