CAPEC-593Session Hijacking

This type of attack involves an adversary that exploits weaknesses in an application's use of sessions in performing authentication. The adversary is able to steal or manipulate an active session and use it to gain unathorized access to the application. Metadata: standard CAPEC pattern, status stable, likelihood high, severity very high. Underlying weakness: CWE-287. Mapped ATT&CK techniques: [object Object], [object Object], [object Object]. Related CAPEC pattern: [object Object].