Detail Kategori CAPEC-210

CAPEC-210

Abuse Existing Functionality
2014-06-23
00h00 +00:00
Stable
2020-12-17
00h00 +00:00
CAPEC Mitre.org
Peringatan untuk CAPEC tertentu
Tetap terinformasi tentang perubahan untuk CAPEC tertentu.
Kelola notifikasi

Nama: Abuse Existing Functionality

An adversary uses or manipulates one or more functions of an application in order to achieve a malicious objective not originally intended by the application, or to deplete a resource to the point that the target's functionality is affected. This is a broad class of attacks wherein the adversary is able to alter the intended result or purpose of the functionality and thereby affect application behavior or information integrity. Outcomes can range from information exposure, vandalism, degrading or denial of service, as well as execution of arbitrary code on the target machine.

Daftar Anggota CAPEC

CAPEC-113: Interface Manipulation Dasar

CAPEC-125: Flooding Dasar

CAPEC-130: Excessive Allocation Dasar

CAPEC-131: Resource Leak Exposure Dasar

CAPEC-212: Functionality Misuse Dasar

CAPEC-216: Communication Channel Manipulation Dasar

CAPEC-227: Sustained Client Engagement Dasar

CAPEC-272: Protocol Manipulation Dasar

CAPEC-554: Functionality Bypass Dasar

Informasi CAPEC

Pengajuan

Nama Organisasi Tanggal Tanggal rilis
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Modifikasi

Nama Organisasi Tanggal Komentar
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2015-12-07 +00:00 Updated Attack_Prerequisites, Description, Relationships, Resources_Required
CAPEC Content Team The MITRE Corporation 2017-01-09 +00:00 Updated Description, Relationships
CAPEC Content Team The MITRE Corporation 2017-08-04 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2020-12-17 +00:00 Updated Taxonomy_Mappings
Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.