Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.