CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Vulnerabilities
How this weakness shows up in real applications — how it works, impact, and remediation:
Related weaknesses
Impactr finds and proves whether CWE-284 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.
