COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-176

Configuration/Environment Manipulation

An attacker manipulates files or settings external to a target application which affect the behavior of that application. For example, many applications use external configuration files and libraries - modification of these entities or otherwise affecting the application's ability to use them would constitute a configuration/environment manipulation attack.

Soyutlama

Meta

Tipik ciddiyet

Medium

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

An attacker manipulates files or settings external to a target application which affect the behavior of that application. For example, many applications use external configuration files and libraries - modification of these entities or otherwise affecting the application's ability to use them would constitute a configuration/environment manipulation attack.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • The target application must consult external files or configuration controls to control its execution. All but the very simplest applications meet this requirement.

Gerekli beceri

MITRE kaydında belirtilmemiş.

Gerekli kaynak

  • The attacker must have the access necessary to affect the files or other environment items the targeted application uses for its operations.
CAPEC-176: Configuration/Environment Manipulation — DayBreach Saldırı Sözlüğü · DayBreach