CAPEC-151 Identity Spoofing

abstraction: metastatus: active

Identity Spoofing refers to the action of assuming (i.e., taking on) the identity of some other entity (human or non-human) and then using that identity to accomplish a goal. An adversary may craft messages that appear to come from a different principle or use stolen / spoofed authentication credentials.

likelihood: Mediumseverity: Medium
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (5)

Related entries.

03

source

Where this definition is published.