CAPECattack pattern
CAPEC-154 Resource Location Spoofing
Medium
Official page ↗
- Abstraction
- Meta
- Status
- Stable
- Likelihood of attack
- Medium
- Typical severity
- Medium
- CAPEC version
- 3.9
Description
An adversary deceives an application or user and convinces them to request a resource from an unintended location. By spoofing the location, the adversary can cause an alternate resource to be used, often one that the adversary controls and can be used to help them achieve their malicious goals.
Prerequisites
• None. All applications rely on file paths and therefore, in theory, they or their resources could be affected by this type of attack.
Consequences
• Authorization: Execute Unauthorized Commands
Mitigations
• Monitor network activity to detect any anomalous or unauthorized communication exchanges.
Related
Weakness · CWE (1)
- CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness
Referenced by CAPEC · can precede (4)
Referenced by CAPEC · child of (2)
Referenced by CWE · attack pattern (1)
- CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness