CWE-1268: Policy Privileges are not Assigned Consistently Between Control and Data Agents
Filter
The product's hardware-enforced access control for a particular resource improperly accounts for privilege discrepancies between control and write policies.
What the weakness is: CWE-1268 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels Likelihood: High · Severity: Medium
The attack patterns MITRE's CAPEC relates to CWE-1268, as MITRE names them. Credits.
Ask an AI about CWE-1268
Show the prompt
Explain CWE-1268: Policy Privileges are not Assigned Consistently Between Control and Data Agents and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1268.html and https://cve.bz/cve/cwe/1268?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 6.6CVE-2026-5892EPSS 0.2%
Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA without user consent via a crafted HTML page. (Chromium security severity: …