CAPEC-151 Identity Spoofing
abstraction: metastatus: activeIdentity Spoofing refers to the action of assuming (i.e., taking on) the identity of some other entity (human or non-human) and then using that identity to accomplish a goal. An adversary may craft messages that appear to come from a different principle or use stolen / spoofed authentication credentials.
likelihood: Mediumseverity: Medium
01
weaknesses (1)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (5)
Related entries.
03
source
Where this definition is published.