CWE-1268
Policy Privileges are not Assigned Consistently Between Control and Data Agents
The product's hardware-enforced access control for a particular resource improperly accounts for privilege discrepancies between control and write policies.
Impactr finds and proves whether CWE-1268 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.