CWE-1263
Improper Physical Access Control
The product is designed with access restricted to certain information, but it does not sufficiently protect against an unauthorized actor with physical access to these areas.
Impactr finds and proves whether CWE-1263 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.