Authorization and Session Management related flaws

IDOR

Privilege Escalation

Parameter Manipulation Attacks

Securing Cookies