Database Privilege Escalation

Padil, Richard A. BSIT 3 1

Privilege Escalation
Privilege escalation - is the act of exploiting a bug, design flaw or configuration oversight in an operating system or software application to gain elevated access to resources that are normally protected from an application or user.

Analysis
According to Margaret Rouse, a privilege escalation attack is a type of network intrusion that takes advantage of programming errors or design flaws to grant the attacker elevated access to the network and its associated data and applications. According to Nick Lewis, if a database function or other part of the database has vulnerability, a user may be able to exploit the vulnerability to gain access to an account with higher privileges.

Conclusion
Privilege escalation is a type of network intrusion that takes advantage to the vulnerability, programming errors or design flows to grant the attacker elevated access to the network and its associated data and application.

Recommendation
Databases or other applications should have to be examined carefully if theyre vulnerable to the privilege escalations to prevent unnecessary actions performed by unauthorized users of the system.