CAPEC Related Weakness
Cross Site Tracing
CWE-648 Incorrect Use of Privileged APIs
CWE-693 Protection Mechanism Failure
Hijacking a privileged process
CWE-648 Incorrect Use of Privileged APIs
CWE-732 Incorrect Permission Assignment for Critical Resource