Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor. A user can access restricted functionality and/or sensitive information that may include administrative functionality and user accounts. The weakness is introduced during Architecture and Design, Implementation stages.