CAPEC-497 상세 정보

CAPEC-497

File Discovery
2019-09-30
00h00 +00:00
높음
매우 낮음
Draft
2020-12-17
00h00 +00:00
특정 CAPEC 알림
특정 CAPEC의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CAPEC 설명

An adversary engages in probing and exploration activities to determine if common key files exists. Such files often contain configuration and security parameters of the targeted application, system or network. Using this knowledge may often pave the way for more damaging attacks.

CAPEC 정보

사전 조건

The adversary must know the location of these common key files.

완화 방법

Leverage file protection mechanisms to render these files accessible only to authorized parties.

관련 약점

CWE-ID 약점 이름

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

제출

이름 조직 날짜 출시일
CAPEC Content Team The MITRE Corporation 2019-09-30 +00:00

수정 사항

이름 조직 날짜 댓글
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Taxonomy_Mappings
CAPEC Content Team The MITRE Corporation 2020-12-17 +00:00 Updated Resources_Required