I busy with an exploitation process of TeamPass web application and I have identified multiple different countermeasures that could potentially be used or combined together for solving the horizontal privilege escalation vulnerability in TeamPass. TeamPass is a password management application and allows to obtain usernames and passwords of different users when exploited, thus allowing to escalate one's lower level privileges on the application.
The countermeasures that I have identified are:
- Least Privileged
- Privilege separation
- Multi-factor authentication and authorization.
In simple terms, which one of these countermeasures would be appropriate for solving the horizontal privilege escalation in TeamPass. and Briefly, why you suggested that one or combination, so I can understand the reason why that choice would be better.