CAPEC-620 詳細資料

CAPEC-620

Drop Encryption Level
2015-11-09
00h00 +00:00
高危
Draft
2022-09-29
00h00 +00:00
指定 CAPEC 提醒
掌握特定 CAPEC 的任何變更。
管理通知

CAPEC 描述

An attacker forces the encryption level to be lowered, thus enabling a successful attack against the encrypted data.

CAPEC 資訊

相關弱點

CWE-ID 弱點名稱

CWE-757

Selection of Less-Secure Algorithm During Negotiation
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used in a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.

提交

名稱 機構 日期 發布日期
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00

修改記錄

名稱 機構 日期 備註
CAPEC Content Team The MITRE Corporation 2015-12-07 +00:00 Updated Related_Attack_Patterns
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Attack_Motivation-Consequences
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Related_Attack_Patterns
CAPEC Content Team The MITRE Corporation 2022-09-29 +00:00 Updated Taxonomy_Mappings