Scope: Access Control / Impact: Bypass Protection Mechanism
対策・緩和策
Funnel all access through a single choke point to simplify how users can access a resource. For every access, perform a check to determine if the user has permissions to access the resource.