CAPEC の説明
An adversary injects one or more TCP RST packets to a target after the target has made a HTTP GET request. The goal of this attack is to have the target and/or destination web server terminate the TCP connection.
CAPEC の情報
前提条件
An On/In Path Device関連する弱点
| 弱点名 | |
|---|---|
CWE-940 |
Improper Verification of Source of a Communication Channel The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin. |
参考文献
REF-477
Inferring Mechanics of Web Censorship Around the WorldJohn-Paul Verkamp, Minaxi Gupta.
登録情報
| 名前 | 組織 | 日付 | リリース日 |
|---|---|---|---|
| Seamus Tuohy |
変更履歴
| 名前 | 組織 | 日付 | コメント |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses |
