Privilege Separation and Access Control Issues

Opis

Weaknesses in this category are related to features and mechanisms providing hardware-based isolation and access control (e.g., identity, policy, locking control) of sensitive shared hardware resources such as registers and fuses.

Wpisy w tej grupie

• CWE-276 Incorrect Default Permissions
• CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')
• CWE-1189 Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
• CWE-1192 Improper Identifier for IP Block used in System-On-Chip (SOC)
• CWE-1220 Insufficient Granularity of Access Control
• CWE-1222 Insufficient Granularity of Address Regions Protected by Register Locks
• CWE-1242 Inclusion of Undocumented Features or Chicken Bits
• CWE-1260 Improper Handling of Overlap Between Protected Memory Ranges
• CWE-1262 Improper Access Control for Register Interface
• CWE-1267 Policy Uses Obsolete Encoding
• CWE-1268 Policy Privileges are not Assigned Consistently Between Control and Data Agents
• CWE-1280 Access Control Check Implemented After Asset is Accessed
• CWE-1294 Insecure Security Identifier Mechanism
• CWE-1299 Missing Protection Mechanism for Alternate Hardware Interface
• CWE-1302 Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC)
• CWE-1303 Non-Transparent Sharing of Microarchitectural Resources
• CWE-1314 Missing Write Protection for Parametric Data Values
• CWE-1318 Missing Support for Security Features in On-chip Fabrics or Buses
• CWE-1334 Unauthorized Error Injection Can Degrade Hardware Redundancy
• CWE-1420 Exposure of Sensitive Information during Transient Execution