Safety & Security
Confused Deputy
A more privileged component being induced to use its authority for a caller who lacks that authority. The component can be functioning as designed at a technical level while acting for the wrong principal or purpose. Caller authority must not be replaced by the service account's broad reach.
Reviewed
Sources
Member lesson
The definition and sources are public. The complete practical lesson is for members.