CAPEC-37 Retrieve Embedded Sensitive Data

abstraction: detailedstatus: active

An attacker examines a target system to find sensitive data that has been embedded within it. This information can reveal confidential contents, such as account numbers or individual keys/credentials that can be used as an intermediate step in a larger attack.

likelihood: Highseverity: Very High

weaknesses (14)

The CWE weakness classes this flaw belongs to.

CWE-1239Improper Zeroization of Hardware Register
CWE-1258Exposure of Sensitive System Information Due to Uncleared Debug Information
CWE-1266Improper Scrubbing of Sensitive Data from Decommissioned Device
CWE-1272Sensitive Information Uncleared Before Debug/Power State Transition
CWE-1278Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques
CWE-1301Insufficient or Incomplete Data Removal within Hardware Component
CWE-1330Remanent Data Readable after Memory Erase
CWE-226Sensitive Information in Resource Not Removed Before Reuse
CWE-311Missing Encryption of Sensitive Data
CWE-312Cleartext Storage of Sensitive Information
CWE-314Cleartext Storage in the Registry
CWE-315Cleartext Storage of Sensitive Information in a Cookie
CWE-318Cleartext Storage of Sensitive Information in Executable
CWE-525Use of Web Browser Cache Containing Sensitive Information

ATT&CK techniques

ATT&CK techniques this enables or maps to.

T1005Data from Local System
T1552.004Private Keys

related attack patterns (1)

Related entries.

CAPEC-167White Box Reverse Engineering

source

Where this definition is published.

MITRE CAPEC