Client Controlled Privilege Manipulation

Variants:
Direct Persistent Session 

Also Known As:
Client-Controlled Role Manipulation, Authorization Bypass via via Parameter Tampering

Vector Operation Method:
Attackers can bypass the authorization enforcement mechanism by manipulating client-originating privilege and role variables that the application relies on to determine the user