CAPEC-22: Exploiting Trust in Client

MITRE CAPEC attack pattern

Description

An attack of this type exploits vulnerabilities in client/server communication channel authentication and data integrity. It leverages the implicit trust a server places in the client, or more importantly, that which the server believes is the client. An attacker executes this type of attack by communicating directly with the server where the server believes it is communicating only with a valid client. There are numerous variations of this type of attack.

Where this sits in the chain

A finding maps to a weakness (CWE), a weakness is exploited by an attack pattern (CAPEC), and an attack pattern shows up in ATT&CK as observed adversary behaviour. This page is the middle hop.

Weaknesses exploited: CWE-20, CWE-200, CWE-287, CWE-290, CWE-693

Prerequisites

• Server software must rely on client side formatted and validated values, and not reinforce these checks on the server side.

Skills required

• Medium: The attacker must have fairly detailed knowledge of the syntax and semantics of client/server communications protocols and grammars

Consequences

• Confidentiality, Integrity, Availability: Execute Unauthorized Commands
• Confidentiality, Access Control, Authorization: Gain Privileges
• Confidentiality: Read Data

Mitigations

• Design: Ensure that client process and/or message is authenticated so that anonymous communications and/or messages are not accepted by the system.
• Design: Do not rely on client validation or encoding for security purposes.
• Design: Utilize digital signatures to increase authentication assurance.
• Design: Utilize two factor authentication to increase authentication assurance.
• Implementation: Perform input validation for all remote content.

Source

• MITRE CAPEC CAPEC-22