CAPEC VIEW: Deprecated Entries
Objective
CAPEC nodes in this view (slice) have been deprecated.
Filter
/Attack_Pattern_Catalog/*/*[@Status='Deprecated']
Membership
View Metrics
CAPECs in this view Attack Patterns 56 Categories 57 Views 0 Total 113
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
View Components
View Components
A |
B |
C |
D |
E |
F |
G |
H |
I |
J |
K |
L |
M |
N |
O |
P |
Q |
R |
S |
T |
U |
V |
W |
X |
Y |
Z CAPEC-430: DEPRECATED: Target Influence via Micro-Expressions
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Target Influence via Micro-Expressions
CAPEC-431: DEPRECATED: Target Influence via Neuro-Linguistic Programming (NLP)
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Target Influence via Neuro-Linguistic Programming (NLP)
CAPEC-432: DEPRECATED: Target Influence via Voice in NLP
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Target Influence via Voice in NLP
CAPEC-257: DEPRECATED: Abuse of Transaction Data Structure
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description, Description Summary 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Abuse of Transaction Data Structure
CAPEC CATEGORY: DEPRECATED: Alter System Components
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Alter System Components
CAPEC CATEGORY: DEPRECATED: Analyze Target
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description, Other_Notes Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Analyze Target
CAPEC-396: DEPRECATED: Bypassing Card or Badge-Based Systems
Description
This attack pattern has been deprecated as it a generalization of
CAPEC-397 : Cloning Magnetic Strip Cards,
CAPEC-398 : Magnetic Strip Card Brute Force Attacks,
CAPEC-399 : Cloning RFID Cards or Chips and
CAPEC-400 : RFID Chip Deactivation or Destruction. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2019-09-30(Version 3.2)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Description, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2019-09-30(Version 3.2)
Bypassing Card or Badge-Based Systems
CAPEC-236: DEPRECATED: Catching exception throw/signal from privileged block
Description
This attack pattern has been deprecated as it did not have enough distinction from
CAPEC-30 : Hijacking a Privileged Thread of Execution. Please refer to
CAPEC-30 moving forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Resources_Required 2020-07-30(Version 3.3)
CAPEC Content Team The MITRE Corporation Updated Execution_Flow 2021-10-21(Version 3.6)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Consequences, Description, Example_Instances, Execution_Flow, Likelihood_Of_Attack, Mitigations, Prerequisites, Related_Attack_Patterns, Related_Weaknesses, Resources_Required, Skills_Required, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2021-10-21(Version 3.6)
Catching exception throw/signal from privileged block
CAPEC-241: DEPRECATED: Code Injection
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-242 : Code Injection". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07(Version 2.8)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description, Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Code Injection
CAPEC-602: DEPRECATED: Degradation
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Degradation
CAPEC CATEGORY: DEPRECATED: Deplete Resources
Summary
This category has been deprecated as it is no longer used by any of the Views.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description, Related_Weaknesses, Resources_Required Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Deplete Resources
CAPEC-213: DEPRECATED: Directory Traversal
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-126 : Path Traversal". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07(Version 2.8)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, Description Summary, Related_Attack_Patterns, Related_Vulnerabilities, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations Previous Entry Names Change Date Previous Entry Name 2017-01-09(Version 2.9)
Directory Traversal
CAPEC-254: DEPRECATED: DTD Injection in a SOAP Message
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the pattern
CAPEC-228 : DTD Injection going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description, Description Summary, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
DTD Injection in a SOAP Message
CAPEC-566: DEPRECATED: Dump Password Hashes
Description
This CAPEC has been deprecated because of is not directly related to a weakness, social engineering, supply chains, or a physical-based attack.
Content History
Submissions Submission Date Submitter Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2019-04-04(Version 3.1)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Description, Prerequisites, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2019-04-04(Version 3.1)
Dump Password Hashes
CAPEC-264: DEPRECATED: Environment Variable Manipulation
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-13 : Subverting Environment Variable Values". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Environment Variable Manipulation
CAPEC CATEGORY: DEPRECATED: Execute Code
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Description, Relationships 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description, Relationships Previous Entry Names Change Date Previous Entry Name 2015-11-09(Version 2.7)
Malicious Code Execution 2017-05-01(Version 2.10)
Execute Code
CAPEC CATEGORY: DEPRECATED: Exploitation of Authorization
Summary
This category has been deprecated as it is no longer used by any of the Views.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07(Version 2.8)
CAPEC Content Team The MITRE Corporation Updated Related_Weaknesses, Relationships 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Exploitation of Authorization
CAPEC-214: DEPRECATED: Fuzzing for garnering J2EE/.NET-based stack traces, for application mapping
Description
This attack pattern has been deprecated as it was merged into "
CAPEC-215 : Fuzzing for application mapping". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Description, Prerequisites, Related_Attack_Patterns, Related_Weaknesses, Resources_Required, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
Fuzzing for garnering J2EE/.NET-based stack traces, for application mapping
CAPEC CATEGORY: DEPRECATED: Gain Physical Access
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Gain Physical Access
CAPEC-265: DEPRECATED: Global variable manipulation
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-77 : Manipulating User-Controlled Variables". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Global variable manipulation
CAPEC-288: DEPRECATED: ICMP Echo Request Ping
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-285 ". Please refer to this other CAPEC going forward.
Typical Severity
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns
CAPEC-316: DEPRECATED: ICMP Fingerprinting Probes
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the standard level pattern
CAPEC-312 : Active OS Fingerprinting going forward, or to any of the detailed patterns that are children of
CAPEC-312 .
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Target_Functional_Services, Targeted_OSI_Layers, Typical_Severity 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
ICMP Fingerprinting Probes
CAPEC-235: DEPRECATED: Implementing a callback to system routine (old AWT Queue)
Description
This attack pattern has been deprecated. Please refer to CAPEC:30 - Hijacking a Privileged Thread of Execution.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description, Description Summary, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Implementing a callback to system routine (old AWT Queue)
CAPEC-409: DEPRECATED: Information Gathering from Non-Traditional Sources
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern. Please refer to
CAPEC-118 : Collect and Analyze Information.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Description Summary, Related_Attack_Patterns, Typical_Severity 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References Previous Entry Names Change Date Previous Entry Name 2017-08-04(Version 2.11)
Information Gathering from Non-Traditional Sources
CAPEC-408: DEPRECATED: Information Gathering from Traditional Sources
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern. Please refer to
CAPEC-118 : Collect and Analyze Information.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Description Summary, Related_Attack_Patterns, Typical_Severity 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References Previous Entry Names Change Date Previous Entry Name 2017-08-04(Version 2.11)
Information Gathering from Traditional Sources
CAPEC-289: DEPRECATED: Infrastructure-based footprinting
Description
This attack pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the meta level pattern
CAPEC-169 : going forward, or to any of its children patterns.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Resources_Required, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Targeted_OSI_Layers, Typical_Severity
CAPEC-314: DEPRECATED: IP Fingerprinting Probes
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the standard level pattern
CAPEC-312 : Active OS Fingerprinting going forward, or to any of the detailed patterns that children of
CAPEC-312 .
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Resources_Required, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Target_Functional_Services, Targeted_OSI_Layers, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
IP Fingerprinting Probes
CAPEC-211: DEPRECATED: Leveraging web tools (e.g. Mozilla's GreaseMonkey, Firebug) to change application behavior
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07(Version 2.8)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Resources_Required, Typical_Severity 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Leveraging web tools (e.g. Mozilla's GreaseMonkey, Firebug) to change application behavior
CAPEC-205: DEPRECATED: Lifting credential(s)/key material embedded in client distributions (thick or thin)
Description
This attack pattern has been deprecated as it is a duplicate of
CAPEC-37 : Retrieve Embedded Sensitive Data. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Methods_of_Attack, Platforms, Purposes, Related_Attack_Patterns, Related_Vulnerabilities, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Lifting credential(s)/key material embedded in client distributions (thick or thin)
CAPEC-249: DEPRECATED: Linux Terminal Injection
Description
This attack pattern has been deprecated as it is covered by "
CAPEC-40 : Manipulating Writeable Terminal Devices". Please refer to this CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Linux Terminal Injection
CAPEC-453: DEPRECATED: Malicious Logic Insertion via Counterfeit Hardware
Description
This attack pattern has been deprecated as it is a duplicate of
CAPEC-452 : Malicious Logic Insertion into Product Hardware. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Malicious Logic Insertion via Counterfeit Hardware
CAPEC-455: DEPRECATED: Malicious Logic Insertion via Inclusion of Counterfeit Hardware Components
Description
This attack pattern has been deprecated as it is a duplicate of
CAPEC-457 : Malicious Logic Insertion into Product Hardware. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Examples-Instances, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Malicious Logic Insertion via Inclusion of Counterfeit Hardware Components
CAPEC-451: DEPRECATED: Malware Propagation via Infected Peripheral Device
Description
This attack pattern has been deprecated as it is a duplicate of
CAPEC-448 : Malware Infection into Product Software. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description Summary, Related_Attack_Patterns 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated References Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Malware Propagation via Infected Peripheral Device
CAPEC-449: DEPRECATED: Malware Propagation via USB Stick
Description
This attack pattern has been deprecated as it is a duplicate of
CAPEC-448 : Malware Infection into Product Software. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Examples-Instances, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Malware Propagation via USB Stick
CAPEC-450: DEPRECATED: Malware Propagation via USB U3 Autorun
Description
This attack pattern has been deprecated as it is a duplicate of
CAPEC-448 : Embed Virus into DLL. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns 2022-09-29(Version 3.8)
CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Malware Propagation via USB U3 Autorun
CAPEC-266: DEPRECATED: Manipulate Canonicalization
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description, Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Manipulate Canonicalization
CAPEC CATEGORY: DEPRECATED: Manipulate System Users
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Manipulate System Users
CAPEC-454: DEPRECATED: Modification of Existing Components with Counterfeit Hardware
Description
This attack pattern has been deprecated as it is a duplicate of
CAPEC-452 : Malicious Logic Insertion into Product Hardware. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Modification of Existing Components with Counterfeit Hardware
CAPEC-567: DEPRECATED: Obtain Data via Utilities
Description
This CAPEC has been deprecated because it is not directly related to a weakness, social engineering, supply chains, or a physical-based attack.
Content History
Submissions Submission Date Submitter Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns 2020-07-30(Version 3.3)
CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Obtain Data via Utilities
CAPEC-311: DEPRECATED: OS Fingerprinting
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the standard level patterns
CAPEC-312 : Active OS Fingerprinting or
CAPEC-313 : Passive OS Fingerprinting going forward, or to any of the detailed patterns that are children of them.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Updated References 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Resources_Required, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Target_Functional_Services, Targeted_OSI_Layers, Typical_Severity 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
OS Fingerprinting
CAPEC-258: DEPRECATED: Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Dynamic Update
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-65 : Sniff Application Code". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Languages, Methods_of_Attack, Platforms, Purposes, Related_Attack_Patterns, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-01-09(Version 2.9)
Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Dynamic Update
CAPEC-260: DEPRECATED: Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Initial Distribution
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-65 : Sniff Application Code". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Languages, Methods_of_Attack, Platforms, Purposes, Related_Attack_Patterns, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-01-09(Version 2.9)
Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Initial Distribution
CAPEC-259: DEPRECATED: Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Patching
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-65 : Sniff Application Code". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Languages, Methods_of_Attack, Platforms, Purposes, Related_Attack_Patterns, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-01-09(Version 2.9)
Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Patching
CAPEC-411: DEPRECATED: Pretexting
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-407 : Social Information Gathering via Pretexting". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity
CAPEC CATEGORY: DEPRECATED: Reconnaissance
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Reconnaissance
CAPEC-269: DEPRECATED: Registry Manipulation
Description
This pattern has been deprecated as it was determined to be a duplicate of another pattern. Please refer to the pattern
CAPEC-203 : Manipulate Application Registry Values going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Description, Description Summary, Related_Attack_Patterns
CAPEC-56: DEPRECATED: Removing/short-circuiting 'guard logic'
Description
This attack pattern has been deprecated as it is a duplicate of
CAPEC-207 : Removing Important Client Functionality. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07(Version 2.8)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Activation_Zone, Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Injection_Vector, Languages, Payload, Payload_Activation_Impact, Platforms, Probing_Techniques, Purposes, Related_Attack_Patterns, Related_Guidelines, Related_Security_Principles, Related_Vulnerabilities, Related_Weaknesses, Resources_Required, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Removing/short-circuiting 'guard logic'
CAPEC-557: DEPRECATED: Schedule Software To Run
Description
This CAPEC has been deprecated because it is not directly related to a weakness, social engineering, supply chains, or a physical-based attack.
Content History
Submissions Submission Date Submitter Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Solutions_and_Mitigations 2020-07-30(Version 3.3)
CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Schedule Software To Run
CAPEC-570: DEPRECATED: Signature-Based Avoidance
Description
This CAPEC has been deprecated because it is not directly related to a weakness, social engineering, supply chains, or a physical-based attack.
Content History
Submissions Submission Date Submitter Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Solutions_and_Mitigations 2020-07-30(Version 3.3)
CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Signature-Based Avoidance
CAPEC-280: DEPRECATED: SOAP Parameter Tampering
Description
This attack pattern has been deprecated as its contents have been included in
CAPEC-279 : SOAP Manipulation. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Resources_Required, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
SOAP Parameter Tampering
CAPEC-404: DEPRECATED: Social Information Gathering Attacks
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern. Please refer to
CAPEC-118 : Collect and Analyze Information.
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Description Summary, Typical_Severity 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-08-04(Version 2.11)
Social Information Gathering Attacks
CAPEC-405: DEPRECATED: Social Information Gathering via Research
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern. Please refer to
CAPEC-118 : Collect and Analyze Information.
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Description Summary, Related_Attack_Patterns, Typical_Severity 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-08-04(Version 2.11)
Social Information Gathering via Research
CAPEC-239: DEPRECATED: Subversion of Authorization Checks: Cache Filtering, Programmatic Security, etc.
Description
This attack pattern has been deprecated as it did not contain any content and did not serve any useful purpose. Please refer to "
CAPEC-207 : removing Important Client Functionality" going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07(Version 2.8)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description, Description Summary 2019-04-04(Version 3.1)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Description, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Subversion of authorization checks: cache filtering, programmatic security, etc. 2019-04-04(Version 3.1)
Subversion of Authorization Checks: Cache Filtering, Programmatic Security, etc.
CAPEC-419: DEPRECATED: Target Influence via Perception of Concession
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate pattern.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-08-04(Version 2.11)
Target Influence via Perception of Concession
CAPEC-315: DEPRECATED: TCP/IP Fingerprinting Probes
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the standard level pattern
CAPEC-312 : Active OS Fingerprinting going forward, or to any of the detailed patterns that are children of
CAPEC-312 .
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Target_Functional_Services, Targeted_OSI_Layers, Typical_Severity 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
TCP/IP Fingerprinting Probes
CAPEC-629: DEPRECATED: Unauthorized Use of Device Resources
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2015-11-09(Version 2.7)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attacker_Skills_or_Knowledge_Required, Description Summary 2019-09-30(Version 3.2)
CAPEC Content Team The MITRE Corporation Updated @Abstraction 2020-07-30(Version 3.3)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2021-06-24(Version 3.5)
CAPEC Content Team The MITRE Corporation Updated Related_Weaknesses 2022-09-29(Version 3.8)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Description, Related_Attack_Patterns, Related_Weaknesses, Skills_Required Previous Entry Names Change Date Previous Entry Name 2022-09-29(Version 3.8)
Unauthorized Use of Device Resources
CAPEC-238: DEPRECATED: Using URL/codebase / G.A.C. (code source) to convince sandbox of privilege
Description
This attack pattern has been deprecated as it did not appear to be a valid attack pattern.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description, Description Summary, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2018-07-31(Version 2.12)
Using URL/codebase / G.A.C. (code source) to convince sandbox of privilege
CAPEC-171: DEPRECATED: Variable Manipulation
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "
CAPEC-77 : Manipulating User-Controlled Variables". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Variable Manipulation
CAPEC-82: DEPRECATED: Violating Implicit Assumptions Regarding XML Content (aka XML Denial of Service (XDoS))
Description
This attack pattern has been deprecated as it a generalization of
CAPEC-230 : XML Nested Payloads,
CAPEC-231 : XML Oversized Payloads, and
CAPEC-147 : XML Ping of Death. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description, Description Summary 2019-09-30(Version 3.2)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Consequences, Description, Example_Instances, Likelihood_Of_Attack, Mitigations, Prerequisites, Related_Weaknesses, Skills_Required, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2019-09-30(Version 3.2)
Violating Implicit Assumptions Regarding XML Content (aka XML Denial of Service (XDoS))
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-01 - Insufficient Authentication
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Authentication
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-02 - Insufficient Authorization
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Authorization
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-04 - Insufficient Transport Layer Protection
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Transport Layer Protection
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-13 - Information Leakage
Summary
This category is related to the WASC Threat Classification 2.0 item Information Leakage
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-14 - Server Misconfiguration
Summary
This category is related to the WASC Threat Classification 2.0 item Server Misconfiguration
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-15 - Application Misconfiguration
Summary
This category is related to the WASC Threat Classification 2.0 item Application Misconfiguration
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-16 - Directory Indexing
Summary
This category is related to the WASC Threat Classification 2.0 item Directory Indexing
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-17 - Improper Filesystem Permissions
Summary
This category is related to the WASC Threat Classification 2.0 item Improper Filesystem Permissions
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-20 - Improper Input Handling
Summary
This category is related to the WASC Threat Classification 2.0 item Improper Input Handling
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-21 - Insufficient Anti-automation
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Anti-automation
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-22 - Improper Output Handling
Summary
This category is related to the WASC Threat Classification 2.0 item Improper Output Handling
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-40 - Insufficient Process Validation
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Process Validation
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-47 - Insufficient Session Expiration
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Session Expiration
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-48 - Insecure Indexing
Summary
This category is related to the WASC Threat Classification 2.0 item Insecure Indexing
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-49 - Insufficient Password Recovery
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Password Recovery
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC-03 - Integer Overflows
Summary
This category is related to the WASC Threat Classification 2.0 item Integer Overflows
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-03 - Integer Overflows
CAPEC CATEGORY: DEPRECATED: WASC-05 - Remote File Inclusion
Summary
This category is related to the WASC Threat Classification 2.0 item Remote File Inclusion
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-05 - Remote File Inclusion
CAPEC CATEGORY: DEPRECATED: WASC-06 - Format String
Summary
This category is related to the WASC Threat Classification 2.0 item Format String
Membership
Nature Type ID Name HasMember Detailed Attack Pattern - A detailed level attack pattern in CAPEC provides a low level of detail, typically leveraging a specific technique and targeting a specific technology, and expresses a complete execution flow. Detailed attack patterns are more specific than meta attack patterns and standard attack patterns and often require a specific protection mechanism to mitigate actual attacks. A detailed level attack pattern often will leverage a number of different standard level attack patterns chained together to accomplish a goal. 67 String Format Overflow in syslog()
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-06 - Format String
CAPEC CATEGORY: DEPRECATED: WASC-07 - Buffer Overflow
Summary
This category is related to the WASC Threat Classification 2.0 item Buffer Overflow
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-07 - Buffer Overflow
CAPEC CATEGORY: DEPRECATED: WASC-08 - Cross-Site Scripting
Summary
This category is related to the WASC Threat Classification 2.0 item Cross-Site Scripting
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-08 - Cross-Site Scripting
CAPEC CATEGORY: DEPRECATED: WASC-09 - Cross-Site Request Forgery
Summary
This category is related to the WASC Threat Classification 2.0 item Cross-Site Request Forgery
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-09 - Cross-Site Request Forgery
CAPEC CATEGORY: DEPRECATED: WASC-10 - Denial of Service
Summary
This category is related to the WASC Threat Classification 2.0 item Denial of Service - see view 333
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships, Summary Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-10 - Denial of Service
CAPEC CATEGORY: DEPRECATED: WASC-11 - Brute Force
Summary
This category is related to the WASC Threat Classification 2.0 item Brute Force
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-11 - Brute Force
CAPEC CATEGORY: DEPRECATED: WASC-12 - Content Spoofing
Summary
This category is related to the WASC Threat Classification 2.0 item Content Spoofing
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-12 - Content Spoofing
CAPEC CATEGORY: DEPRECATED: WASC-18 - Credential/Session Prediction
Summary
This category is related to the WASC Threat Classification 2.0 item Credential/Session Prediction
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-18 - Credential/Session Prediction
CAPEC CATEGORY: DEPRECATED: WASC-19 - SQL Injection
Summary
This category is related to the WASC Threat Classification 2.0 item SQL Injection
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-19 - SQL Injection
CAPEC CATEGORY: DEPRECATED: WASC-23 - XML Injection
Summary
This category is related to the WASC Threat Classification 2.0 item XML Injection
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-23 - XML Injection
CAPEC CATEGORY: DEPRECATED: WASC-24 - HTTP Request Splitting
Summary
This category is related to the WASC Threat Classification 2.0 item HTTP Request Splitting
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-24 - HTTP Request Splitting
CAPEC CATEGORY: DEPRECATED: WASC-25 - HTTP Response Splitting
Summary
This category is related to the WASC Threat Classification 2.0 item HTTP Response Splitting
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-25 - HTTP Response Splitting
CAPEC CATEGORY: DEPRECATED: WASC-26 - HTTP Request Smuggling
Summary
This category is related to the WASC Threat Classification 2.0 item HTTP Request Smuggling
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-26 - HTTP Request Smuggling
CAPEC CATEGORY: DEPRECATED: WASC-27 - HTTP Response Smuggling
Summary
This category is related to the WASC Threat Classification 2.0 item HTTP Response Smuggling
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-27 - HTTP Response Smuggling
CAPEC CATEGORY: DEPRECATED: WASC-28 - Null Byte Injection
Summary
This category is related to the WASC Threat Classification 2.0 item Null Byte Injection
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-28 - Null Byte Injection
CAPEC CATEGORY: DEPRECATED: WASC-29 - LDAP Injection
Summary
This category is related to the WASC Threat Classification 2.0 item LDAP Injection
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-29 - LDAP Injection
CAPEC CATEGORY: DEPRECATED: WASC-30 - Mail Command Injection
Summary
This category is related to the WASC Threat Classification 2.0 item Mail Command Injection
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-30 - Mail Command Injection
CAPEC CATEGORY: DEPRECATED: WASC-31 - OS Commanding
Summary
This category is related to the WASC Threat Classification 2.0 item OS Commanding
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-31 - OS Commanding
CAPEC CATEGORY: DEPRECATED: WASC-32 - Routing Detour
Summary
This category is related to the WASC Threat Classification 2.0 item Routing Detour
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-32 - Routing Detour
CAPEC CATEGORY: DEPRECATED: WASC-33 - Path Traversal
Summary
This category is related to the WASC Threat Classification 2.0 item Path Traversal
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-33 - Path Traversal
CAPEC CATEGORY: DEPRECATED: WASC-34 - Predictable Resource Location
Summary
This category is related to the WASC Threat Classification 2.0 item Predictable Resource Location
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-34 - Predictable Resource Location
CAPEC CATEGORY: DEPRECATED: WASC-35 - SOAP Array Abuse
Summary
This category is related to the WASC Threat Classification 2.0 item SOAP Array Abuse
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-35 - SOAP Array Abuse
CAPEC CATEGORY: DEPRECATED: WASC-36 - SSI Injection
Summary
This category is related to the WASC Threat Classification 2.0 item SSI Injection
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-36 - SSI Injection
CAPEC CATEGORY: DEPRECATED: WASC-37 - Session Fixation
Summary
This category is related to the WASC Threat Classification 2.0 item Session Fixation
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-37 - Session Fixation
CAPEC CATEGORY: DEPRECATED: WASC-38 - URL Redirector Abuse
Summary
This category is related to the WASC Threat Classification 2.0 item URL Redirector Abuse
Notes
Relationship
It should be noted that the member relation to
CAPEC-194 is not as clean as could be.
CAPEC-194 would ideally have another child (other than
CAPEC-543 : Counterfeit Websites) that is specific to URL Redirection. Unlike
CAPEC-543 , URL Redirection does not require a counterfeit website, but rather the user to simply click a link. With that said, we have created this relationship to
CAPEC-194 due to the related weakness (
CWE-601 ), which specifically deals with URL Redirection, and will revist this at a later date.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationship_Notes, Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-38 - URL Redirector Abuse
CAPEC CATEGORY: DEPRECATED: WASC-39 - XPath Injection
Summary
This category is related to the WASC Threat Classification 2.0 item XPath Injection
Membership
Nature Type ID Name HasMember Detailed Attack Pattern - A detailed level attack pattern in CAPEC provides a low level of detail, typically leveraging a specific technique and targeting a specific technology, and expresses a complete execution flow. Detailed attack patterns are more specific than meta attack patterns and standard attack patterns and often require a specific protection mechanism to mitigate actual attacks. A detailed level attack pattern often will leverage a number of different standard level attack patterns chained together to accomplish a goal. 83 XPath Injection
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-39 - XPath Injection
CAPEC CATEGORY: DEPRECATED: WASC-41 - XML Attribute Blowup
Summary
This category is related to the WASC Threat Classification 2.0 item XML Attribute Blowup
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-41 - XML Attribute Blowup
CAPEC CATEGORY: DEPRECATED: WASC-42 - Abuse of Functionality
Summary
This category is related to the WASC Threat Classification 2.0 item Abuse of Functionality
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-42 - Abuse of Functionality
CAPEC CATEGORY: DEPRECATED: WASC-43 - XML External Entities
Summary
This category is related to the WASC Threat Classification 2.0 item XML External Entities
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-43 - XML External Entities
CAPEC CATEGORY: DEPRECATED: WASC-44 - XML Entity Expansion
Summary
This category is related to the WASC Threat Classification 2.0 item XML Entity Expansion
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-44 - XML Entity Expansion
CAPEC CATEGORY: DEPRECATED: WASC-45 - Fingerprinting
Summary
This category is related to the WASC Threat Classification 2.0 item Fingerprinting
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Relationships 2017-08-04(Version 2.11)
CAPEC Content Team The MITRE Corporation Updated Relationships 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-45 - Fingerprinting
CAPEC CATEGORY: DEPRECATED: WASC-46 - XQuery Injection
Summary
This category is related to the WASC Threat Classification 2.0 item XQuery Injection
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2020-12-17(Version 3.4)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, References, Relationships Previous Entry Names Change Date Previous Entry Name 2020-12-17(Version 3.4)
WASC-46 - XQuery Injection
CAPEC-484: DEPRECATED: XML Client-Side Attack
Description
This attack pattern has been deprecated as it a generalization of
CAPEC-230 : XML Nested Payloads and
CAPEC-231 : XML Oversized Payloads. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated References 2019-04-04(Version 3.1)
CAPEC Content Team The MITRE Corporation Updated Related_Weaknesses 2019-09-30(Version 3.2)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Consequences, Description, Example_Instances, Execution_Flow, Indicators, Likelihood_Of_Attack, Mitigations, Prerequisites, References, Related_Attack_Patterns, Related_Weaknesses, Skills_Required Previous Entry Names Change Date Previous Entry Name 2019-09-30(Version 3.2)
XML Client-Side Attack
CAPEC-99: DEPRECATED: XML Parser Attack
Description
This attack pattern has been deprecated as it a generalization of
CAPEC-230 : XML Nested Payloads and
CAPEC-231 : XML Oversized Payloads. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2019-09-30(Version 3.2)
CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Consequences, Description, Example_Instances, Execution_Flow, Indicators, Likelihood_Of_Attack, Mitigations, Prerequisites, References, Related_Attack_Patterns, Related_Weaknesses, Skills_Required, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2019-09-30(Version 3.2)
XML Parser Attack
CAPEC-91: DEPRECATED: XSS in IMG Tags
Description
This attack pattern has been deprecated as it is contained in the existing attack pattern "
CAPEC-18 : XSS Targeting Non-Script Elements". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Activation_Zone, Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Injection_Vector, Languages, Methods_of_Attack, Payload, Payload_Activation_Impact, Platforms, Purposes, Related_Attack_Patterns, Related_Guidelines, Related_Security_Principles, Related_Vulnerabilities, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity 2018-07-31(Version 2.12)
CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
XSS in IMG Tags
CAPEC-106: DEPRECATED: XSS through Log Files
Description
This attack pattern has been deprecated as it referes to an existing chain relationship between "
CAPEC-93 : Log Injection-Tampering-Forging" and "
CAPEC-63 : Cross-Site Scripting". Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09(Version 2.9)
CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Activation_Zone, Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Injection_Vector, Languages, Methods_of_Attack, Payload, Payload_Activation_Impact, Platforms, Probing_Techniques, Purposes, Related_Attack_Patterns, Related_Security_Principles, Related_Weaknesses, Relevant_Security_Requirements, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Cross Site Scripting through Log Files
CAPEC-246: DEPRECATED: XSS Using Flash
Description
This pattern has been deprecated as it is covered by a chaining relationship between
CAPEC-174 : Flash Parameter Injection and
CAPEC-591 : Stored XSS. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23(Version 2.6)
CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01(Version 2.10)
CAPEC Content Team The MITRE Corporation Updated Attack_Phases, Description, Description Summary, Related_Attack_Patterns, Related_Weaknesses Previous Entry Names Change Date Previous Entry Name 2017-05-01(Version 2.10)
Cross-Site Scripting Using Flash
More information is available — Please select a different filter.
Objective
Content History
