Editing Privilege escalation (section)

===Examples===
This problem often occurs in [[web application]]s.  Consider the following example:
* User A has access to their own bank account in an Internet Banking application.
* User B has access to their own bank account in the same Internet Banking application.
* The vulnerability occurs when User A is able to access User B's bank account by performing some sort of malicious activity.

This malicious activity may be possible due to common web application weaknesses or vulnerabilities.

Potential web application vulnerabilities or situations that may lead to this condition include:
* Predictable [[session ID]]s in the user's [[HTTP cookie]]
* [[Session fixation]]
* [[Cross-site scripting]]
* Easily guessable [[password]]s
* Theft or hijacking of [[HTTP cookie|session cookies]]
* [[Keystroke logging]]