Detailedlikelihood: Lowseverity: HighDraft
CAPEC-476Signature Spoofing by Misrepresentation
Abstraction
Detailed
Status
Draft
Likelihood
Low
Severity
High
Description
An attacker exploits a weakness in the parsing or display code of the recipient software to generate a data blob containing a supposedly valid signature, but the signer's identity is falsely represented, which can lead to the attacker manipulating the recipient software or its victim user to perform compromising actions.
Related weaknesses· 1
Related attack patterns· 1
Exploits1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Authentication Bypass by Spoofingcwe-290 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.