Weakness (CWE)

CWE-783: Operator Precedence Logic Error

Base Draft

The product uses an expression in which operator precedence causes incorrect logic to be used.

How to prevent it (1 mitigation)

Implementation

Regularly wrap sub-expressions in parentheses, especially in security-critical code.

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi…