Umbra Wiki attack-pattern attack-pattern/CAPEC-295
Back to wiki

CAPEC-295 — Timestamp Request

provenance: imported · ATT&CK: T1124 · CWE: CWE-200

CAPEC-295: Timestamp Request

MITRE CAPEC attack pattern

Status Stable
Typical severity Low
Likelihood of attack
Catalogue CAPEC 3.9 (2023-01-24)

Description

This pattern of attack leverages standard requests to learn the exact time associated with a target system. An adversary may be able to use the timestamp returned from the target to attack time-based security algorithms, such as random number generators, or time-based authentication mechanisms.

Where this sits in the chain

A finding maps to a weakness (CWE), a weakness is exploited by an attack pattern (CAPEC), and an attack pattern shows up in ATT&CK as observed adversary behaviour. This page is the middle hop.

Weaknesses exploited: CWE-200

ATT&CK techniques: T1124

Prerequisites

  • The ability to send a timestamp request to a remote target and receive a response.

Consequences

  • Confidentiality: Other

Source