I'm wondering if someone could confirm my thinking on the following. Despite googling I haven't found a direct answer, although have seen horizontal vs vertical terminology in other sec contexts...
Note I'm using the terminology from bugcrowd.com's VRT
https://bugcrowd.com/vulnerability-rating-taxonomy
My thoughts are horizontal authentication bypass means elevating or changing your privileges after logging into an existing account, whilst vertical means bypassing authentication entirely.
Is this correct or have I missed something?
Cheers.