CAPEC-497 詳細資料

CAPEC-497

File Discovery
2019-09-30
00h00 +00:00
高危
極低
Draft
2020-12-17
00h00 +00:00
指定 CAPEC 提醒
掌握特定 CAPEC 的任何變更。
管理通知

CAPEC 描述

An adversary engages in probing and exploration activities to determine if common key files exists. Such files often contain configuration and security parameters of the targeted application, system or network. Using this knowledge may often pave the way for more damaging attacks.

CAPEC 資訊

前置條件

The adversary must know the location of these common key files.

緩解措施

Leverage file protection mechanisms to render these files accessible only to authorized parties.

相關弱點

CWE-ID 弱點名稱

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

提交

名稱 機構 日期 發布日期
CAPEC Content Team The MITRE Corporation 2019-09-30 +00:00

修改記錄

名稱 機構 日期 備註
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Taxonomy_Mappings
CAPEC Content Team The MITRE Corporation 2020-12-17 +00:00 Updated Resources_Required