CAPEC-620 상세 정보

CAPEC-620

Drop Encryption Level
2015-11-09
00h00 +00:00
높음
Draft
2022-09-29
00h00 +00:00
특정 CAPEC 알림
특정 CAPEC의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CAPEC 설명

An attacker forces the encryption level to be lowered, thus enabling a successful attack against the encrypted data.

CAPEC 정보

관련 약점

CWE-ID 약점 이름

CWE-757

Selection of Less-Secure Algorithm During Negotiation
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used in a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.

제출

이름 조직 날짜 출시일
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00

수정 사항

이름 조직 날짜 댓글
CAPEC Content Team The MITRE Corporation 2015-12-07 +00:00 Updated Related_Attack_Patterns
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Attack_Motivation-Consequences
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Related_Attack_Patterns
CAPEC Content Team The MITRE Corporation 2022-09-29 +00:00 Updated Taxonomy_Mappings