🛡️ Security

Missing Authorization

A vulnerability class (CWE-862) where an application authenticates who a user is but fails to check whether they are permitted to perform an action. The user is legitimately in the system; the flaw is that a permission boundary inside it is not enforced.

📚 Deep Dive

Learn Article

How Attackers Turn a Trusted File-Transfer Feature Into a Malware Delivery Channel

Remote-access tools are built to run code on other machines. When the authorization check fails, a trusted file-transfer feature becomes a malware pipeline. Here is how and why.

intermediate 5 min read

Back to Glossary