thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Elevation of Privilege (EoP)

Gaining capabilities beyond those that were authorized, such as a normal user gaining administrative rights.

Definition

In STRIDE, elevation of privilege violates authorization. In applications it often results from broken access control, injection or memory corruption. Microsoft also publishes the Elevation of Privilege card game to teach threat modeling.

Example

A user changes role=user to role=admin in a profile update request and gains admin access.

Exam tip

EoP maps to authorization; know the card game is a threat-modeling training tool.

Related terms