CAPECattack pattern
CAPEC-295 Timestamp Request
Low
Official page ↗
- Abstraction
- Detailed
- Status
- Stable
- Typical severity
- Low
- CAPEC version
- 3.9
Description
This pattern of attack leverages standard requests to learn the exact time associated with a target system. An adversary may be able to use the timestamp returned from the target to attack time-based security algorithms, such as random number generators, or time-based authentication mechanisms.
Prerequisites
• The ability to send a timestamp request to a remote target and receive a response.
Consequences
• Confidentiality: Other
Related
Att&ck technique · MITRE ATT&CK (1)
- T1124 System Time Discovery technique
Child of · CAPEC (1)
- CAPEC-292 Host Discovery attack pattern
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
Referenced by CWE · attack pattern (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness