Poisoned Pipeline / Mitigations / M1123

M1123

Implement token access control and permissions

Apply the principle of least privilege when assigning permissions to tokens.
Each token should only be granted the minimum necessary permissions to perform its intended operations, and should not have unnecessary write or delete permissions.

Applies to

• T0112 Compromised token

References

• https://auth0.com/docs/secure/tokens/token-best-practices
• https://www.okta.com/identity-101/what-is-least-privilege-access/