Umbra Wiki attack-pattern attack-pattern/CAPEC-116
Back to wiki

CAPEC-116 — Excavation

provenance: imported · CWE: CWE-200 CWE-1243

CAPEC-116: Excavation

MITRE CAPEC attack pattern

Status Stable
Typical severity Medium
Likelihood of attack High
Catalogue CAPEC 3.9 (2023-01-24)

Description

An adversary actively probes the target in a manner that is designed to solicit information that could be leveraged for malicious purposes.

Where this sits in the chain

A finding maps to a weakness (CWE), a weakness is exploited by an attack pattern (CAPEC), and an attack pattern shows up in ATT&CK as observed adversary behaviour. This page is the middle hop.

Weaknesses exploited: CWE-200, CWE-1243

Prerequisites

  • An adversary requires some way of interacting with the system.

Consequences

  • Confidentiality: Read Data

Mitigations

  • Minimize error/response output to only what is necessary for functional use or corrective language.
  • Remove potentially sensitive information that is not necessary for the application's functionality.

Source