CAPEC VIEW: Deprecated Entries
View ID: 483
Status: Draft
Objective
CAPEC nodes in this view (slice) have been deprecated.
Filter
/Attack_Pattern_Catalog/*/*[@Status='Deprecated']
Membership
View Metrics
CAPECs in this view Attack Patterns 53 Categories 23 Views 0 Total 76
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
View Components
View Components
A |
B |
C |
D |
E |
F |
G |
H |
I |
J |
K |
L |
M |
N |
O |
P |
Q |
R |
S |
T |
U |
V |
W |
X |
Y |
Z CAPEC-430: DEPRECATED: Target Influence via Micro-Expressions
Attack Pattern ID: 430
Status: Deprecated
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2018-07-31 Target Influence via Micro-Expressions
CAPEC-431: DEPRECATED: Target Influence via Neuro-Linguistic Programming (NLP)
Attack Pattern ID: 431
Status: Deprecated
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2018-07-31 Target Influence via Neuro-Linguistic Programming (NLP)
CAPEC-432: DEPRECATED: Target Influence via Voice in NLP
Attack Pattern ID: 432
Status: Deprecated
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2018-07-31 Target Influence via Voice in NLP
CAPEC-257: DEPRECATED: Abuse of Transaction Data Structure
Attack Pattern ID: 257
Status: Deprecated
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description, Description Summary 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01 Abuse of Transaction Data Structure
CAPEC CATEGORY: DEPRECATED: Alter System Components
Category ID: 526
Status: Deprecated
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Relationships 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2017-05-01 Alter System Components
CAPEC CATEGORY: DEPRECATED: Analyze Target
Category ID: 281
Status: Deprecated
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Relationships 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description, Other_Notes Previous Entry Names Change Date Previous Entry Name 2017-05-01 Analyze Target
CAPEC-396: DEPRECATED: Bypassing Card or Badge-Based Systems
Attack Pattern ID: 396
Status: Deprecated
Description
This attack pattern has been deprecated as it a generalization of CAPEC-397: Cloning Magnetic Strip Cards, CAPEC-398: Magnetic Strip Card Brute Force Attacks, CAPEC-399: Cloning RFID Cards or Chips and CAPEC-400: RFID Chip Deactivation or Destruction. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2019-09-30 CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Description, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2019-09-30 Bypassing Card or Badge-Based Systems
CAPEC-241: DEPRECATED: Code Injection
Attack Pattern ID: 241
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-242 : Code Injection". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description, Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01 Code Injection
CAPEC-602: DEPRECATED: Degradation
Attack Pattern ID: 602
Status: Deprecated
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01 Degradation
CAPEC CATEGORY: DEPRECATED: Deplete Resources
Category ID: 119
Status: Deprecated
Summary
This category has been deprecated as it is no longer used by any of the Views.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description, Related_Weaknesses, Resources_Required Previous Entry Names Change Date Previous Entry Name 2017-05-01 Deplete Resources
CAPEC-213: DEPRECATED: Directory Traversal
Attack Pattern ID: 213
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-126 : Path Traversal". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, Description Summary, Related_Attack_Patterns, Related_Vulnerabilities, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations Previous Entry Names Change Date Previous Entry Name 2017-01-09 Directory Traversal
CAPEC-254: DEPRECATED: DTD Injection in a SOAP Message
Attack Pattern ID: 254
Status: Deprecated
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the pattern CAPEC-228 : DTD Injection going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description, Description Summary, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01 DTD Injection in a SOAP Message
CAPEC-566: DEPRECATED: Dump Password Hashes
Attack Pattern ID: 566
Status: Deprecated
Description
This CAPEC has been deprecated because of is not directly related to a weakness, social engineering, supply chains, or a physical-based attack.
Content History
Submissions Submission Date Submitter Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2019-04-04 CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Description, Prerequisites, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2019-04-04 Dump Password Hashes
CAPEC-264: DEPRECATED: Environment Variable Manipulation
Attack Pattern ID: 264
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-13 : Subverting Environment Variable Values". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations Previous Entry Names Change Date Previous Entry Name 2017-05-01 Environment Variable Manipulation
CAPEC CATEGORY: DEPRECATED: Execute Code
Category ID: 525
Status: Deprecated
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Description, Relationships 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description, Relationships Previous Entry Names Change Date Previous Entry Name 2015-11-09 Malicious Code Execution 2017-05-01 Execute Code
CAPEC CATEGORY: DEPRECATED: Exploitation of Authorization
Category ID: 232
Status: Deprecated
Summary
This category has been deprecated as it is no longer used by any of the Views.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07 CAPEC Content Team The MITRE Corporation Updated Related_Weaknesses, Relationships 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2017-05-01 Exploitation of Authorization
CAPEC CATEGORY: DEPRECATED: Gain Physical Access
Category ID: 436
Status: Deprecated
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2017-05-01 Gain Physical Access
CAPEC-265: DEPRECATED: Global variable manipulation
Attack Pattern ID: 265
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-77 : Manipulating User-Controlled Variables". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations Previous Entry Names Change Date Previous Entry Name 2017-05-01 Global variable manipulation
CAPEC-288: DEPRECATED: ICMP Echo Request Ping
Attack Pattern ID: 288
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-285". Please refer to this other CAPEC going forward.
Typical Severity
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns
CAPEC-316: DEPRECATED: ICMP Fingerprinting Probes
Attack Pattern ID: 316
Status: Deprecated
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the standard level pattern CAPEC-312 : Active OS Fingerprinting going forward, or to any of the detailed patterns that are children of CAPEC-312.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Target_Functional_Services, Targeted_OSI_Layers, Typical_Severity 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01 ICMP Fingerprinting Probes
CAPEC-235: DEPRECATED: Implementing a callback to system routine (old AWT Queue)
Attack Pattern ID: 235
Status: Deprecated
Description
This attack pattern has been deprecated. Please refer to CAPEC:30 - Hijacking a Privileged Thread of Execution.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description, Description Summary, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2018-07-31 Implementing a callback to system routine (old AWT Queue)
CAPEC-409: DEPRECATED: Information Gathering from Non-Traditional Sources
Attack Pattern ID: 409
Status: Deprecated
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern. Please refer to CAPEC-118 : Collect and Analyze Information.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Description Summary, Related_Attack_Patterns, Typical_Severity 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References Previous Entry Names Change Date Previous Entry Name 2017-08-04 Information Gathering from Non-Traditional Sources
CAPEC-408: DEPRECATED: Information Gathering from Traditional Sources
Attack Pattern ID: 408
Status: Deprecated
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern. Please refer to CAPEC-118 : Collect and Analyze Information.
Relationships
The table below shows the other attack patterns and high level categories that are related to this attack pattern. These relationships are defined as ChildOf and ParentOf, and give insight to similar items that may exist at higher and lower levels of abstraction. In addition, relationships such as CanFollow, PeerOf, and CanAlsoBe are defined to show similar attack patterns that the user may want to explore.
Nature Type ID Name ParentOf Detailed Attack Pattern - A detailed level attack pattern in CAPEC provides a low level of detail, typically leveraging a specific technique and targeting a specific technology, and expresses a complete execution flow. Detailed attack patterns are more specific than meta attack patterns and standard attack patterns and often require a specific protection mechanism to mitigate actual attacks. A detailed level attack pattern often will leverage a number of different standard level attack patterns chained together to accomplish a goal. 467 Cross Site Identification
The table below shows the views that this attack pattern belongs to and top level categories within that view.
View Name Top Level Categories
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Description Summary, Related_Attack_Patterns, Typical_Severity 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References Previous Entry Names Change Date Previous Entry Name 2017-08-04 Information Gathering from Traditional Sources
CAPEC-289: DEPRECATED: Infrastructure-based footprinting
Attack Pattern ID: 289
Status: Deprecated
Description
This attack pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the meta level pattern CAPEC-169 : going forward, or to any of its children patterns.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Resources_Required, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Targeted_OSI_Layers, Typical_Severity
CAPEC-314: DEPRECATED: IP Fingerprinting Probes
Attack Pattern ID: 314
Status: Deprecated
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the standard level pattern CAPEC-312 : Active OS Fingerprinting going forward, or to any of the detailed patterns that children of CAPEC-312.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Resources_Required, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Target_Functional_Services, Targeted_OSI_Layers, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01 IP Fingerprinting Probes
CAPEC-211: DEPRECATED: Leveraging web tools (e.g. Mozilla's GreaseMonkey, Firebug) to change application behavior
Attack Pattern ID: 211
Status: Deprecated
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Resources_Required, Typical_Severity 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01 Leveraging web tools (e.g. Mozilla's GreaseMonkey, Firebug) to change application behavior
CAPEC-205: DEPRECATED: Lifting credential(s)/key material embedded in client distributions (thick or thin)
Attack Pattern ID: 205
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of CAPEC-37 : Retrieve Embedded Sensitive Data. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Methods_of_Attack, Platforms, Purposes, Related_Attack_Patterns, Related_Vulnerabilities, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01 Lifting credential(s)/key material embedded in client distributions (thick or thin)
CAPEC-249: DEPRECATED: Linux Terminal Injection
Attack Pattern ID: 249
Status: Deprecated
Description
This attack pattern has been deprecated as it is covered by "CAPEC-40 : Manipulating Writeable Terminal Devices". Please refer to this CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2018-07-31 Linux Terminal Injection
CAPEC-453: DEPRECATED: Malicious Logic Insertion via Counterfeit Hardware
Attack Pattern ID: 453
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of CAPEC-452 : Malicious Logic Insertion into Product Hardware. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01 Malicious Logic Insertion via Counterfeit Hardware
CAPEC-455: DEPRECATED: Malicious Logic Insertion via Inclusion of Counterfeit Hardware Components
Attack Pattern ID: 455
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of CAPEC-457 : Malicious Logic Insertion into Product Hardware. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Examples-Instances, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01 Malicious Logic Insertion via Inclusion of Counterfeit Hardware Components
CAPEC-451: DEPRECATED: Malware Propagation via Infected Peripheral Device
Attack Pattern ID: 451
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of CAPEC-448 : Malware Infection into Product Software. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description Summary, Related_Attack_Patterns 2018-07-31 CAPEC Content Team The MITRE Corporation Updated References Previous Entry Names Change Date Previous Entry Name 2017-05-01 Malware Propagation via Infected Peripheral Device
CAPEC-449: DEPRECATED: Malware Propagation via USB Stick
Attack Pattern ID: 449
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of CAPEC-448 : Malware Infection into Product Software. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Examples-Instances, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01 Malware Propagation via USB Stick
CAPEC-450: DEPRECATED: Malware Propagation via USB U3 Autorun
Attack Pattern ID: 450
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of CAPEC-448 : Malware Infection into Product Software. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01 Malware Propagation via USB U3 Autorun
CAPEC-266: DEPRECATED: Manipulate Canonicalization
Attack Pattern ID: 266
Status: Deprecated
Description
This attack pattern has been deprecated.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description, Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01 Manipulate Canonicalization
CAPEC CATEGORY: DEPRECATED: Manipulate System Users
Category ID: 527
Status: Deprecated
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Relationships Previous Entry Names Change Date Previous Entry Name 2017-05-01 Manipulate System Users
CAPEC-454: DEPRECATED: Modification of Existing Components with Counterfeit Hardware
Attack Pattern ID: 454
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of CAPEC-452 : Malicious Logic Insertion into Product Hardware. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2017-05-01 Modification of Existing Components with Counterfeit Hardware
CAPEC-567: DEPRECATED: Obtain Data via Utilities
Attack Pattern ID: 567
Status: Deprecated
Description
This CAPEC has been deprecated because of is not directly related to a weakness, social engineering, supply chains, or a physical-based attack.
Content History
Submissions Submission Date Submitter Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2018-07-31 Obtain Data via Utilities
CAPEC-311: DEPRECATED: OS Fingerprinting
Attack Pattern ID: 311
Status: Deprecated
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the standard level patterns CAPEC-312 : Active OS Fingerprinting or CAPEC-313 : Passive OS Fingerprinting going forward, or to any of the detailed patterns that are children of them.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Updated References 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Resources_Required, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Target_Functional_Services, Targeted_OSI_Layers, Typical_Severity 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01 OS Fingerprinting
CAPEC-258: DEPRECATED: Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Dynamic Update
Attack Pattern ID: 258
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-65 : Sniff Application Code". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Languages, Methods_of_Attack, Platforms, Purposes, Related_Attack_Patterns, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-01-09 Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Dynamic Update
CAPEC-260: DEPRECATED: Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Initial Distribution
Attack Pattern ID: 260
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-65 : Sniff Application Code". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Languages, Methods_of_Attack, Platforms, Purposes, Related_Attack_Patterns, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-01-09 Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Initial Distribution
CAPEC-259: DEPRECATED: Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Patching
Attack Pattern ID: 259
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-65 : Sniff Application Code". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Languages, Methods_of_Attack, Platforms, Purposes, Related_Attack_Patterns, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-01-09 Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Patching
CAPEC-411: DEPRECATED: Pretexting
Attack Pattern ID: 411
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-407 : Social Information Gathering via Pretexting". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity
CAPEC CATEGORY: DEPRECATED: Reconnaissance
Category ID: 286
Status: Deprecated
Summary
This category has been deprecated as it is no longer used in any view.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Relationships 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description Previous Entry Names Change Date Previous Entry Name 2017-05-01 Reconnaissance
CAPEC-269: DEPRECATED: Registry Manipulation
Attack Pattern ID: 269
Status: Deprecated
Description
This pattern has been deprecated as it was determined to be a duplicate of another pattern. Please refer to the pattern CAPEC-203 : Manipulate Application Registry Values going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Description, Description Summary, Related_Attack_Patterns
CAPEC-56: DEPRECATED: Removing/short-circuiting 'guard logic'
Attack Pattern ID: 56
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of CAPEC-207 : Removing Important Client Functionality. Please refer to this other pattern going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Activation_Zone, Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Injection_Vector, Languages, Payload, Payload_Activation_Impact, Platforms, Probing_Techniques, Purposes, Related_Attack_Patterns, Related_Guidelines, Related_Security_Principles, Related_Vulnerabilities, Related_Weaknesses, Resources_Required, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01 Removing/short-circuiting 'guard logic'
CAPEC-557: DEPRECATED: Schedule Software To Run
Attack Pattern ID: 557
Status: Deprecated
Description
This CAPEC has been deprecated because of is not directly related to a weakness, social engineering, supply chains, or a physical-based attack.
Content History
Submissions Submission Date Submitter Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Solutions_and_Mitigations Previous Entry Names Change Date Previous Entry Name 2018-07-31 Schedule Software To Run
CAPEC-570: DEPRECATED: Signature-Based Avoidance
Attack Pattern ID: 570
Status: Deprecated
Description
This CAPEC has been deprecated because of is not directly related to a weakness, social engineering, supply chains, or a physical-based attack.
Content History
Submissions Submission Date Submitter Organization 2015-11-09 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Solutions_and_Mitigations Previous Entry Names Change Date Previous Entry Name 2018-07-31 Signature-Based Avoidance
CAPEC-280: DEPRECATED: SOAP Parameter Tampering
Attack Pattern ID: 280
Status: Deprecated
Description
This attack pattern has been deprecated as its contents have been included in CAPEC-279 : SOAP Manipulation. Please refer to this other pattern going forward.
Relationships
The table below shows the other attack patterns and high level categories that are related to this attack pattern. These relationships are defined as ChildOf and ParentOf, and give insight to similar items that may exist at higher and lower levels of abstraction. In addition, relationships such as CanFollow, PeerOf, and CanAlsoBe are defined to show similar attack patterns that the user may want to explore.
The table below shows the views that this attack pattern belongs to and top level categories within that view.
View Name Top Level Categories
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Resources_Required, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2018-07-31 SOAP Parameter Tampering
CAPEC-404: DEPRECATED: Social Information Gathering Attacks
Attack Pattern ID: 404
Status: Deprecated
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern. Please refer to CAPEC-118 : Collect and Analyze Information.
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Description Summary, Typical_Severity 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-08-04 Social Information Gathering Attacks
CAPEC-405: DEPRECATED: Social Information Gathering via Research
Attack Pattern ID: 405
Status: Deprecated
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate attack pattern. Please refer to CAPEC-118 : Collect and Analyze Information.
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Description Summary, Related_Attack_Patterns, Typical_Severity 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-08-04 Social Information Gathering via Research
CAPEC-239: DEPRECATED: Subversion of Authorization Checks: Cache Filtering, Programmatic Security, etc.
Attack Pattern ID: 239
Status: Deprecated
Description
This attack pattern has been deprecated as it did not contain any content and did not serve any useful purpose. Please refer to "CAPEC-207: removing Important Client Functionality" going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2015-12-07 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description, Description Summary 2019-04-04 CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Description, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2018-07-31 Subversion of authorization checks: cache filtering, programmatic security, etc. 2019-04-04 Subversion of Authorization Checks: Cache Filtering, Programmatic Security, etc.
CAPEC-419: DEPRECATED: Target Influence via Perception of Concession
Attack Pattern ID: 419
Status: Deprecated
Description
This attack pattern has been deprecated as it was deemed not to be a legitimate pattern.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-08-04 CAPEC Content Team The MITRE Corporation Updated Description Summary, References, Related_Attack_Patterns, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-08-04 Target Influence via Perception of Concession
CAPEC-315: DEPRECATED: TCP/IP Fingerprinting Probes
Attack Pattern ID: 315
Status: Deprecated
Description
This pattern has been deprecated as it was determined to be an unnecessary layer of abstraction. Please refer to the standard level pattern CAPEC-312 : Active OS Fingerprinting going forward, or to any of the detailed patterns that are children of CAPEC-312.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Motivation-Consequences, Attack_Prerequisites, Description Summary, References, Related_Attack_Patterns, Target_Attack_Surface, Target_Attack_Surface_Localities, Target_Attack_Surface_Types, Target_Functional_Services, Targeted_OSI_Layers, Typical_Severity 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01 TCP/IP Fingerprinting Probes
CAPEC-238: DEPRECATED: Using URL/codebase / G.A.C. (code source) to convince sandbox of privilege
Attack Pattern ID: 238
Status: Deprecated
Description
This attack pattern has been deprecated as it did not appear to be a valid attack pattern.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description, Description Summary, Related_Attack_Patterns Previous Entry Names Change Date Previous Entry Name 2018-07-31 Using URL/codebase / G.A.C. (code source) to convince sandbox of privilege
CAPEC-171: DEPRECATED: Variable Manipulation
Attack Pattern ID: 171
Status: Deprecated
Description
This attack pattern has been deprecated as it is a duplicate of the existing attack pattern "CAPEC-77 : Manipulating User-Controlled Variables". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Prerequisites, Description Summary, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01 Variable Manipulation
CAPEC-82: DEPRECATED: Violating Implicit Assumptions Regarding XML Content (aka XML Denial of Service (XDoS))
Attack Pattern ID: 82
Status: Deprecated
Description
This attack pattern has been deprecated as it a generalization of CAPEC-230: XML Nested Payloads, CAPEC-231: XML Oversized Payloads, and CAPEC-147: XML Ping of Death. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description, Description Summary 2019-09-30 CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Consequences, Description, Example_Instances, Likelihood_Of_Attack, Mitigations, Prerequisites, Related_Weaknesses, Skills_Required, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2019-09-30 Violating Implicit Assumptions Regarding XML Content (aka XML Denial of Service (XDoS))
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-01 - Insufficient Authentication
Category ID: 334
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Authentication
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-02 - Insufficient Authorization
Category ID: 335
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Authorization
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-04 - Insufficient Transport Layer Protection
Category ID: 337
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Transport Layer Protection
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-13 - Information Leakage
Category ID: 346
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Information Leakage
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-14 - Server Misconfiguration
Category ID: 347
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Server Misconfiguration
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-15 - Application Misconfiguration
Category ID: 348
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Application Misconfiguration
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-16 - Directory Indexing
Category ID: 349
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Directory Indexing
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-17 - Improper Filesystem Permissions
Category ID: 350
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Improper Filesystem Permissions
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-20 - Improper Input Handling
Category ID: 353
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Improper Input Handling
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-21 - Insufficient Anti-automation
Category ID: 354
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Anti-automation
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-22 - Improper Output Handling
Category ID: 355
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Improper Output Handling
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-40 - Insufficient Process Validation
Category ID: 373
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Process Validation
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-47 - Insufficient Session Expiration
Category ID: 380
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Session Expiration
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-48 - Insecure Indexing
Category ID: 381
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Insecure Indexing
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC CATEGORY: DEPRECATED: WASC Threat Classification 2.0 - WASC-49 - Insufficient Password Recovery
Category ID: 382
Status: Deprecated
Summary
This category is related to the WASC Threat Classification 2.0 item Insufficient Password Recovery
References
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation
CAPEC-484: DEPRECATED: XML Client-Side Attack
Attack Pattern ID: 484
Status: Deprecated
Description
This attack pattern has been deprecated as it a generalization of CAPEC-230: XML Nested Payloads and CAPEC-231: XML Oversized Payloads. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2018-07-31 CAPEC Content Team The MITRE Corporation Updated References 2019-04-04 CAPEC Content Team The MITRE Corporation Updated Related_Weaknesses 2019-09-30 CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Consequences, Description, Example_Instances, Execution_Flow, Indicators, Likelihood_Of_Attack, Mitigations, Prerequisites, References, Related_Attack_Patterns, Related_Weaknesses, Skills_Required Previous Entry Names Change Date Previous Entry Name 2019-09-30 XML Client-Side Attack
CAPEC-99: DEPRECATED: XML Parser Attack
Attack Pattern ID: 99
Status: Deprecated
Description
This attack pattern has been deprecated as it a generalization of CAPEC-230: XML Nested Payloads and CAPEC-231: XML Oversized Payloads. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2019-09-30 CAPEC Content Team The MITRE Corporation Updated @Name, @Status, Consequences, Description, Example_Instances, Execution_Flow, Indicators, Likelihood_Of_Attack, Mitigations, Prerequisites, References, Related_Attack_Patterns, Related_Weaknesses, Skills_Required, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2019-09-30 XML Parser Attack
CAPEC-91: DEPRECATED: XSS in IMG Tags
Attack Pattern ID: 91
Status: Deprecated
Description
This attack pattern has been deprecated as it is contained in the existing attack pattern "CAPEC-18 : XSS Targeting Non-Script Elements". Please refer to this other CAPEC going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Activation_Zone, Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Injection_Vector, Languages, Methods_of_Attack, Payload, Payload_Activation_Impact, Platforms, Purposes, Related_Attack_Patterns, Related_Guidelines, Related_Security_Principles, Related_Vulnerabilities, Related_Weaknesses, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity 2018-07-31 CAPEC Content Team The MITRE Corporation Updated Description Summary Previous Entry Names Change Date Previous Entry Name 2017-05-01 XSS in IMG Tags
CAPEC-106: DEPRECATED: XSS through Log Files
Attack Pattern ID: 106
Status: Deprecated
Description
This attack pattern has been deprecated as it referes to an existing chain relationship between "CAPEC-93 : Log Injection-Tampering-Forging" and "CAPEC-63 : Cross-Site Scripting". Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-01-09 CAPEC Content Team The MITRE Corporation Updated Related_Attack_Patterns 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Activation_Zone, Architectural_Paradigms, Attack_Motivation-Consequences, Attack_Phases, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, CIA_Impact, Description, Description Summary, Examples-Instances, Frameworks, Injection_Vector, Languages, Methods_of_Attack, Payload, Payload_Activation_Impact, Platforms, Probing_Techniques, Purposes, Related_Attack_Patterns, Related_Security_Principles, Related_Weaknesses, Relevant_Security_Requirements, Resources_Required, Solutions_and_Mitigations, Technical_Context, Typical_Likelihood_of_Exploit, Typical_Severity Previous Entry Names Change Date Previous Entry Name 2017-05-01 Cross Site Scripting through Log Files
CAPEC-246: DEPRECATED: XSS Using Flash
Attack Pattern ID: 246
Status: Deprecated
Description
This pattern has been deprecated as it is covered by a chaining relationship between CAPEC-174: Flash Parameter Injection and CAPEC-591: Stored XSS. Please refer to these CAPECs going forward.
Content History
Submissions Submission Date Submitter Organization 2014-06-23 CAPEC Content Team The MITRE Corporation Modifications Modification Date Modifier Organization 2017-05-01 CAPEC Content Team The MITRE Corporation Updated Attack_Phases, Description, Description Summary, Related_Attack_Patterns, Related_Weaknesses Previous Entry Names Change Date Previous Entry Name 2017-05-01 Cross-Site Scripting Using Flash
More information is available — Please select a different filter.
Objective
Content History
