CWE-654: Reliance on a Single Factor in a Security Decision
Also known as: Separation of Privilege
A protection mechanism relies exclusively, or to a large extent, on the evaluation of a single condition or the integrity of a single object or entity in order to make a decision about granting access to restricted resources or functionality.
Overview
CWE-654 (Reliance on a Single Factor in a Security Decision) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.