CAPEC 描述
An adversary gains access to an application, service, or device with the privileges of an authorized or privileged user by escaping the confines of a virtualized environment. The adversary is then able to access resources or execute unauthorized code within the host environment, generally with the privileges of the user running the virtualized process. Successfully executing an attack of this type is often the first step in executing more complex attacks.
CAPEC 信息
执行流程
1) Explore
[Probing] The adversary probes the target application, service, or device to find a possible weakness that would allow escaping the virtualized environment.
技术手段
- Probing applications, services, or devices for virtualization weaknesses.
2) Experiment
[Verify the exploitable security weaknesses] Using the found weakness, the adversary attempts to escape the virtualized environment.
技术手段
- Using an application weakness to escape a virtualized environment
3) Exploit
[Execute more complex attacks] Once outside of the virtualized environment, the adversary attempts to perform other more complex attacks such as accessing system resources or executing unauthorized code within the host environment.
技术手段
- Executing complex attacks when given higher permissions by escaping a virtualized environment
缓解措施
Ensure virtualization software is current and up-to-date.Abide by the least privilege principle to avoid assigning users more privileges than necessary.
相关弱点
| 弱点名称 | |
|---|---|
CWE-693 |
Protection Mechanism Failure The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product. |
提交记录
| 名称 | 组织 | 日期 | 发布日期 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
修改记录
| 名称 | 组织 | 日期 | 备注 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Resources_Required | |
| CAPEC Content Team | The MITRE Corporation | Updated Taxonomy_Mappings | |
| CAPEC Content Team | The MITRE Corporation | Updated Execution_Flow |
