CAPEC-551 상세 정보

CAPEC-551

Modify Existing Service
2015-11-09
00h00 +00:00
Draft
2022-09-29
00h00 +00:00
특정 CAPEC 알림
특정 CAPEC의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CAPEC 설명

When an operating system starts, it also starts programs called services or daemons. Modifying existing services may break existing services or may enable services that are disabled/not commonly used.

CAPEC 정보

완화 방법

Limit privileges of user accounts so service changes can only be performed by authorized administrators. Also monitor any service changes that may occur inadvertently.

관련 약점

CWE-ID 약점 이름

CWE-284

Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CWE-522

Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

제출

이름 조직 날짜 출시일
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00

수정 사항

이름 조직 날짜 댓글
CAPEC Content Team The MITRE Corporation 2019-04-04 +00:00 Updated Related_Weaknesses
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Taxonomy_Mappings
CAPEC Content Team The MITRE Corporation 2021-06-24 +00:00 Updated Taxonomy_Mappings
CAPEC Content Team The MITRE Corporation 2022-09-29 +00:00 Updated Taxonomy_Mappings