CAPECattack pattern

CAPEC-554 Functionality Bypass

High Official page ↗
Abstraction
Meta
Status
Draft
Likelihood of attack
Medium
Typical severity
High
CAPEC version
3.9

Description

An adversary attacks a system by bypassing some or all functionality intended to protect it. Often, a system user will think that protection is in place, but the functionality behind those protections has been disabled by the adversary.

Related

Weakness · CWE (2)

  • CWE-1299 Missing Protection Mechanism for Alternate Hardware Interface weakness
  • CWE-424 Improper Protection of Alternate Path weakness

Referenced by CAPEC · child of (3)

  • CAPEC-179 Calling Micro-Services Directly attack pattern
  • CAPEC-464 Evercookie attack pattern
  • CAPEC-465 Transparent Proxy Abuse attack pattern

Referenced by CWE · attack pattern (2)

  • CWE-1299 Missing Protection Mechanism for Alternate Hardware Interface weakness
  • CWE-424 Improper Protection of Alternate Path weakness