Q: Explain the differences between horizontal, vertical, and unauthorised privilege escalation.

A:

• Horizontal Privilege Escalation: This occurs when a user attempts to access another user's resources or data at the same privilege level. For example, User A tries to view User B's personal profile.
• Vertical Privilege Escalation: This occurs when a user with lower privileges can gain higher privileges, such as from a standard user to an administrator.
• Unauthorised Privilege Escalation: This is a broad term for any attempt to access a resource without having the proper authorisation. This is a severe violation of security and can result in system compromise or data theft.