Privilege Escalation Vulnerability
What is the attack?
In simple terms, privilege escalation means a user can access privileges of another user or an admin user. This can be categorized as ?Horizontal Privilege Escalation? and ?Vertical Privilege Escalation?. In horizontal privilege escalation, a user is able to access another user?s account and privileges, whereas in vertical privilege escalation, a lower-level user is able to access the privileges of a higher-level user or typically an admin user.
Privilege escalation attack can be executed by either of the three methods given below:
- Privilege Escalation by compromising session:In this method the session of an admin user is intercepted and reused by another user, either admin or non-admin. This results in the interception of the hacked use?d identity.
- Privilege Escalation by parameter manipulation:An attacker can intercept requests and responses and manipulate many parameters to change the privilege.
