CAPEC-149 Explore for Predictable Temporary File Names
abstraction: detailedstatus: activeAn attacker explores a target to identify the names and locations of predictable temporary files for the purpose of launching further attacks against the target. This involves analyzing naming conventions and storage locations of the temporary files created by a target application. If an attacker can predict the names of temporary files they can use this information to mount other attacks, such as information gathering and symlink attacks.
severity: Medium
01
weaknesses (1)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (1)
Related entries.
03
source
Where this definition is published.