Overly Permissive Access Policy

FACSChorus software allows direct access to its database using your login credentials. If someone gains physical access to your computer, they could steal these credentials and modify or delete important data in the database.

The FACSChorus database implements overly permissive access policies, permitting direct authentication using the logged-in user's privileges. An adversary with physical access can extract credentials and leverage them to perform unauthorized read, modification, or deletion operations on database records, requiring no additional authentication bypass.