CVE-2023-30960

Controls whether organization resources are exposed to external system spheres by permitting or prohibiting their use.

The control ensures information is not released into a security sphere where the recipient lacks matching access authorizations.

The control ensures information resources are not exposed to the incorrect (public) sphere through review and authorization.

Protects against data mining that would expose resources to unauthorized spheres by enforcing detection and controls.

Per-request decision making makes it harder to bypass authorization using user-controlled keys without proper validation in the decision process.

Consistent enforcement of approved authorizations makes bypassing via user-controlled keys ineffective.

Restricts information flows to ensure resources are not exposed to incorrect or unauthorized spheres.

Controlling internal connections prevents exposure of resources to unintended internal spheres.

Access control policy directly requires enforcement of authorization rules that prevent unauthorized access via manipulated keys.

Managing access rights includes ensuring users can only access their own records and not bypass authorization by altering identifiers.

Privileged access rights control restricts what data each user may access, mitigating direct object reference attacks.

Placing systems of differing trust levels into separate domains prevents resources from being placed in a sphere where they are reachable by unintended actors.