A trapdoor is a hidden piece of code that responds to a special input, allowing its user access to resources without passing through the normal security enforcement mechanism.
Time of Introduction
Architecture and Design
Implementation
Operation
Common Consequences
Scope
Effect
Confidentiality
Integrity
Availability
Access Control
Technical Impact: Execute unauthorized code or
commands; Bypass protection
mechanism
Potential Mitigations
Always verify the integrity of the software that is being
installed.
Identify and closely inspect the conditions for entering privileged
areas of the code, especially those related to authentication, process
invocation, and network communications.
Description
