Vertical Privilege Escalation Deep Dive
Introduction to Vertical Privilege Escalation
Moving Up the Ladder
In any computer system, not all users are created equal. Some have basic access, allowing them to perform everyday tasks. Others, like administrators, hold the keys to the kingdom. They can install software, change settings, and access sensitive data. Privilege escalation is the act of exploiting a flaw to gain unauthorised access to these higher-level permissions.
Vertical Privilege Escalation
noun
An attack where a user with lower-level privileges gains access to the functions or data of a user with higher-level privileges, such as an administrator or root user.
Think of it like being in an office building. A standard user has a keycard that only opens the main door and their own office. An administrator has a master keycard that opens every door, including the server room and the CEO's suite. Vertical privilege escalation is like a standard user finding a way to turn their limited keycard into a master key.
In a vertical privilege escalation attack, a cybercriminal tries to move vertically within a network: they compromise one user, and then try to compromise other users with more privileges.
Vertical vs Horizontal
Privilege escalation isn't just about moving up. It can also be about moving sideways. This is the key difference between vertical and horizontal privilege escalation.
-
Vertical escalation is about climbing the hierarchy. An attacker starts with a low-privilege account and finds a way to become an administrator, gaining more power.
-
Horizontal escalation is about moving across the same level. An attacker gains access to one user's account and then uses that to access other accounts with similar permissions, like another colleague's email or files.
Vertical escalation is more dangerous because it grants control over the entire system, whereas horizontal escalation typically limits the attacker to the permissions of a single user type.
What Attackers Want
Gaining administrative access isn't the end goal; it's a means to an end. Once an attacker achieves vertical privilege escalation, they have the power to do significant damage. Their objectives often fall into a few common categories.
| Objective | Description |
|---|---|
| Data Theft | Access and exfiltrate sensitive information, such as customer data, financial records, or intellectual property. |
| System Manipulation | Alter or disable security settings, modify system logs to hide their tracks, or disrupt normal operations. |
| Malicious Software Installation | Deploy ransomware, spyware, or other malware across the system or network. |
| Persistent Access | Create a permanent backdoor into the system, allowing them to return whenever they want. |
By understanding the attacker's motivation, we can better appreciate the serious risk that vertical privilege escalation poses to any organisation.
An attacker exploits a vulnerability to access a colleague's email account, which has the same level of permissions as their own. What type of attack is this?
In the analogy of an office building's security, what does vertical privilege escalation represent?