Skip to content
ImpactrStart an engagement

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Vulnerabilities

How this weakness shows up in real applications — how it works, impact, and remediation:

Related weaknesses

Impactr finds and proves whether CWE-284 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.