Broken access control

Failure to enforce limits on what authenticated users may do, letting them reach data or functions beyond their rights.

Scheme

Broader terms