ebc46ddd_d_building_secure_applications__Element___Threat
[Vulnerabilities] exposed system files and resources for which access has not been sufficiently restricted buffer overruns, SQL injection, cross-site scripting, and other forms of parameter manipulation, gaining access to more capabilities than intended escalation of privileges by exploiting known operating system vulnerabilities abuse of administrative privileges insider knowledge about details of application design, network configuration, file names, or database structure [Countermeasures] configuration of network components, databases, workstations, and servers according to best practice guidelines employing all available access control mechanisms, including those at the application level thorough input validation and other defensive coding practices principles of least privilege and constrained I/O compartmentalized architecture to limit damage activity monitoring and intrusion detection systems deterrence through secure audit trails [Element / Threat] 
Authorization restricting the actions a user is permitted to take Threat: An attacker gains access to restricted resources without proper approval, setting the stage for breach of confidentiality or data tampering.
Base One - Network security and building secure applications
Element / Threat