View source for Confused deputy problem

A '''confused deputy''' is a [[computer program]] that is innocently fooled by some other party into misusing its authority.

== Description ==

It is a specific type of privilege escalation.

In [[information security]], the confused deputy problem is often cited as an example of why capability-based security is important, as capability systems protect against this whereas access control list-based systems do not.

== See also ==

* [[Ambient authority]]
* [[Cross-site request forgery]]
* [[Information security]]

== External links ==

* [https://en.wikipedia.org/wiki/Confused_deputy_problem Confused deputy problem] @ Wikipedia

[[Category:Computer security]]