Threat intelligence / Technique
Restful Privilege Elevation
An adversary identifies a Rest HTTP (Get, Put, Delete) style permission method allowing them to perform various malicious actions upon server data due to lack of access control mechanisms implemented within the application service accepting HTTP messages.
Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17
Confidence
—
An adversary identifies a Rest HTTP (Get, Put, Delete) style permission method allowing them to perform various malicious actions upon server data due to lack of access control mechanisms implemented within the application service accepting HTTP messages.
Labels
20 recorded
Relationships
1 external