As I understand when a user with low privilege does some actions only available for users with high privilege this is called privilege escalation.

And authorization bypass is when I do some actions which I don't have the permissions to do, if I'm not mistaken.

What is the difference?

  • Have you done any googling? This is answered with a simple search. – schroeder Feb 4 '18 at 0:11
  • ^ and consider the case where a user bypasses authentication to access data or actions of another user that has the same privilege level. – multithr3at3d Feb 4 '18 at 3:47

These terms focus on different aspects of the attack: privilege escalation describes what was achieved, i.e. gaining higher privileges, no matter how. Authorization bypass describes how things were done, i.e. by bypassing the authorization, no matter what was gained this way.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.