This might not seem like a big deal, but the attacker has essentially masqueraded as a legitimate user and gained all the potential access that the user has.

这看起来不是一件什么大不了的事，但是攻击者基本上是通过伪装成合法用户然后取得用户的所有权限。