CAPECattack pattern

CAPEC-154 Resource Location Spoofing

Medium Official page ↗
Abstraction
Meta
Status
Stable
Likelihood of attack
Medium
Typical severity
Medium
CAPEC version
3.9

Description

An adversary deceives an application or user and convinces them to request a resource from an unintended location. By spoofing the location, the adversary can cause an alternate resource to be used, often one that the adversary controls and can be used to help them achieve their malicious goals.

Prerequisites

• None. All applications rely on file paths and therefore, in theory, they or their resources could be affected by this type of attack.

Consequences

• Authorization: Execute Unauthorized Commands

Mitigations

• Monitor network activity to detect any anomalous or unauthorized communication exchanges.

Related

Weakness · CWE (1)

  • CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness

Referenced by CAPEC · can precede (4)

  • CAPEC-105 HTTP Request Splitting attack pattern
  • CAPEC-273 HTTP Response Smuggling attack pattern
  • CAPEC-33 HTTP Request Smuggling attack pattern
  • CAPEC-34 HTTP Response Splitting attack pattern

Referenced by CAPEC · child of (2)

  • CAPEC-159 Redirect Access to Libraries attack pattern
  • CAPEC-616 Establish Rogue Location attack pattern

Referenced by CWE · attack pattern (1)

  • CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness