CAPEC-36 Using Unpublished Interfaces or Functionality
abstraction: standardstatus: activeAn adversary searches for and invokes interfaces or functionality that the target system designers did not intend to be publicly available. If interfaces fail to authenticate requests, the attacker may be able to invoke functionality they are not authorized for.
likelihood: Mediumseverity: High
01
weaknesses (4)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (1)
Related entries.
03
source
Where this definition is published.