CWE-274
Improper Handling of Insufficient Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.
Impactr finds and proves whether CWE-274 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.