CAPEC-57Utilizing REST's Trust in the System Resource to Obtain Sensitive Data

This attack utilizes a REST(REpresentational State Transfer)-style applications' trust in the system resources and environment to obtain sensitive data once SSL is terminated. Metadata: detailed CAPEC pattern, status draft, likelihood medium, severity very high. Underlying weaknesses: CWE-300, CWE-287, CWE-693. Mapped ATT&CK technique: [object Object]. Related CAPEC pattern: [object Object].