Standardlikelihood: Highseverity: HighDraft
CAPEC-12Choosing Message Identifier
Abstraction
Standard
Status
Draft
Likelihood
High
Severity
High
Description
This pattern of attack is defined by the selection of messages distributed via multicast or public information channels that are intended for another client by determining the parameter value assigned to that client. This attack allows the adversary to gain access to potentially privileged information, and to possibly perpetrate other attacks through the distribution means by impersonation. If the channel/message being manipulated is an input rather than output mechanism for the system, (such as a command bus), this style of attack could be used to change the adversary's identifier to more a privileged one.
Related weaknesses· 2
Related attack patterns· 2
Exploits2
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Missing Authentication for Critical Functioncwe-306 | 100% | live |
| Weakness | Insertion of Sensitive Information Into Sent Datacwe-201 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.