Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
CWE-1220