Identity Weaknesses 28 articles

Overview Excessive privileged accounts refer to the presence of more user accounts with elevated access rights than necessary within an organization’s IT environment. This situation arises when access permissions are…

Overview Identity sprawl refers to the proliferation of multiple digital identities, credentials, and access points across an organization’s systems and applications. It arises when users accumulate numerous accounts and permissions…

Overview Improper Just-In-Time (JIT) Access Controls occur when systems fail to enforce appropriate, time-limited permissions for users or processes requiring temporary elevated access. This weakness arises when access is granted…

Overview Improper Privilege Escalation Controls occur when a system fails to adequately restrict users or processes from gaining elevated access beyond their authorized permissions. This vulnerability arises due to insufficient…

Overview Improper role mining and review is a vulnerability that occurs when organizations inadequately analyze and validate user roles and permissions within their access control systems. This weakness arises from…

Overview Inadequate identity governance refers to insufficient controls and processes for managing user identities, access rights, and privileges within an organization. This weakness arises when organizations fail to enforce proper…

Overview Inconsistent Identity Policy Enforcement occurs when identity and access management policies are applied unevenly across systems, applications, or environments. This inconsistency can arise due to misconfigurations, legacy systems, or…

Overview Insecure federation trust relationships occur when organizations establish trust between identity providers and service providers without adequate security controls or validation. This vulnerability arises from improper configuration, weak authentication…

Overview Insecure OAuth implementations occur when the OAuth protocol is improperly configured or integrated, leading to vulnerabilities in authorization flows. These weaknesses arise from incorrect handling of tokens, insufficient validation,…

Overview Insecure password reset flows refer to weaknesses in the mechanisms that allow users to recover or change their passwords. These vulnerabilities arise when the process lacks proper authentication, verification,…

Overview Insecure service accounts refer to user accounts created to run applications or services that are configured with weak security controls, such as excessive privileges, default or weak passwords, or…

Overview Insecure Single Sign-On (SSO) configuration occurs when the setup or implementation of SSO systems lacks adequate security controls, leading to vulnerabilities. This weakness arises from improper validation, weak token…

Overview Insufficient Segregation of Duties (SoD) is a vulnerability that occurs when critical tasks or privileges are not properly divided among multiple individuals or roles. This lack of separation can…

Overview Lack of identity monitoring refers to the absence or insufficiency of continuous oversight and verification of user identities within an organization’s systems. This weakness arises when organizations fail to…

Overview Lack of identity threat detection refers to the absence or insufficiency of mechanisms to monitor, identify, and respond to malicious activities targeting user identities. This weakness arises when organizations…

Overview Lack of multi-factor authentication (MFA) refers to the absence of an additional verification step beyond a single factor, typically a password, when accessing systems or services. This vulnerability arises…

Overview Over-permissive role assignments occur when users or systems are granted more access rights or privileges than necessary for their functions. This vulnerability arises from improper role design, lack of…

Overview Poor API identity controls refer to inadequate mechanisms for verifying and managing the identities of users, devices, or services interacting with an application programming interface (API). This weakness arises…

Overview Poor identity lifecycle management refers to inadequate processes for creating, maintaining, and deactivating user identities and access rights within an organization. This weakness arises when identities are not properly…

Overview Poor password policies refer to inadequate rules and guidelines governing the creation, management, and enforcement of user passwords. This weakness arises when organizations implement weak or inconsistent password requirements,…