COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-633

Token Impersonation

An adversary exploits a weakness in authentication to create an access token (or equivalent) that impersonates a different entity, and then associates a process/thread to that that impersonated token. This action causes a downstream user to make a decision or take action that is based on the assumed identity, and not the response that blocks the adversary.

Soyutlama

Detailed

Tipik ciddiyet

Medium

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

An adversary exploits a weakness in authentication to create an access token (or equivalent) that impersonates a different entity, and then associates a process/thread to that that impersonated token. This action causes a downstream user to make a decision or take action that is based on the assumed identity, and not the response that blocks the adversary.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • This pattern of attack is only applicable when a downstream user leverages tokens to verify identity, and then takes action based on that identity.

Gerekli beceri

MITRE kaydında belirtilmemiş.

Gerekli kaynak

MITRE kaydında belirtilmemiş.

Etki

Başarılı saldırı neye yol açar?

Alter Execution Logic

Etkilenen alanlar: Integrity

Gain Privileges

Etkilenen alanlar: Integrity

Hide Activities

Etkilenen alanlar: Integrity

CAPEC-633: Token Impersonation — DayBreach Saldırı Sözlüğü · DayBreach