Umbra Wiki attack-pattern attack-pattern/CAPEC-176
Back to wiki

CAPEC-176 — Configuration/Environment Manipulation

provenance: imported · CWE: CWE-15 CWE-1233 CWE-1234 CWE-1304 CWE-1328

CAPEC-176: Configuration/Environment Manipulation

MITRE CAPEC attack pattern

Status Draft
Typical severity Medium
Likelihood of attack
Catalogue CAPEC 3.9 (2023-01-24)

Description

An attacker manipulates files or settings external to a target application which affect the behavior of that application. For example, many applications use external configuration files and libraries - modification of these entities or otherwise affecting the application's ability to use them would constitute a configuration/environment manipulation attack.

Where this sits in the chain

A finding maps to a weakness (CWE), a weakness is exploited by an attack pattern (CAPEC), and an attack pattern shows up in ATT&CK as observed adversary behaviour. This page is the middle hop.

Weaknesses exploited: CWE-15, CWE-1233, CWE-1234, CWE-1304, CWE-1328

Prerequisites

  • The target application must consult external files or configuration controls to control its execution. All but the very simplest applications meet this requirement.

Source