CAPEC-620

Drop Encryption Level
2015-11-09
00h00 +00:00
高危
Draft
2022-09-29
00h00 +00:00
指定 CAPEC 提醒
随时了解指定 CAPEC 的变更。
管理通知

CAPEC 描述

An attacker forces the encryption level to be lowered, thus enabling a successful attack against the encrypted data.

CAPEC 信息

相关弱点

CWE-ID 弱点名称

CWE-757

Selection of Less-Secure Algorithm During Negotiation
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used in a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.

提交记录

名称 组织 日期 发布日期
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00

修改记录

名称 组织 日期 备注
CAPEC Content Team The MITRE Corporation 2015-12-07 +00:00 Updated Related_Attack_Patterns
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Attack_Motivation-Consequences
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Related_Attack_Patterns
CAPEC Content Team The MITRE Corporation 2022-09-29 +00:00 Updated Taxonomy_Mappings