Horizontal privilege escalation refers to which scenario?

Horizontal privilege escalation refers to which scenario?

• A. Privilege separation
• B. Vertical privilege escalation
• C. Access control bypass
• D. Horizontal privilege escalation

Answer: (D)

Horizontal privilege escalation is about moving laterally within the same level of access. It happens when an attacker who already has a certain privilege level tries to access resources or perform actions that belong to another user who has the same level of rights. This often results from weak authorization checks or flaws in session management, such as direct object references or predictable identifiers, that allow one user to access another user’s data or capabilities without needing higher privileges. For example, a normal user could access another user’s profile or files because the system doesn’t properly verify that the requesting user is allowed to view that specific resource. The goal isn’t to gain administrator or root rights, but to step into another account or resource at the same privilege tier. In contrast, vertical privilege escalation would mean breaking out to higher privileges (like from user to admin), which this scenario does not describe. Privilege separation is about limiting what each privilege level can do, not about moving between accounts at the same level. Access control bypass is a broad term that could include horizontal moves, but the scenario specifically illustrates moving between equal-privilege accounts, which is the essence of horizontal privilege escalation.

Horizontal privilege escalation is about moving laterally within the same level of access. It happens when an attacker who already has a certain privilege level tries to access resources or perform actions that belong to another user who has the same level of rights. This often results from weak authorization checks or flaws in session management, such as direct object references or predictable identifiers, that allow one user to access another user’s data or capabilities without needing higher privileges.

For example, a normal user could access another user’s profile or files because the system doesn’t properly verify that the requesting user is allowed to view that specific resource. The goal isn’t to gain administrator or root rights, but to step into another account or resource at the same privilege tier.

In contrast, vertical privilege escalation would mean breaking out to higher privileges (like from user to admin), which this scenario does not describe. Privilege separation is about limiting what each privilege level can do, not about moving between accounts at the same level. Access control bypass is a broad term that could include horizontal moves, but the scenario specifically illustrates moving between equal-privilege accounts, which is the essence of horizontal privilege escalation.