Standardseverity: MediumDraft
CAPEC-202Create Malicious Client
Abstraction
Standard
Status
Draft
Severity
Medium
Description
An adversary creates a client application to interface with a target service where the client violates assumptions the service makes about clients. Services that have designated client applications (as opposed to services that use general client applications, such as IMAP or POP mail servers which can interact with any IMAP or POP client) may assume that the client will follow specific procedures.
Related weaknesses· 1
Related attack patterns· 1
Exploits1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Client-Side Enforcement of Server-Side Securitycwe-602 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.