CAPEC-22 Exploiting Trust in Client

abstraction: metastatus: active

An attack of this type exploits vulnerabilities in client/server communication channel authentication and data integrity. It leverages the implicit trust a server places in the client, or more importantly, that which the server believes is the client. An attacker executes this type of attack by communicating directly with the server where the server believes it is communicating only with a valid client. There are numerous variations of this type of attack.

likelihood: Highseverity: High
01

weaknesses (5)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (4)

Related entries.

03

source

Where this definition is published.