CAPEC-475 Signature Spoofing by Improper Validation

abstraction: detailedstatus: active

An adversary exploits a cryptographic weakness in the signature verification algorithm implementation to generate a valid signature without knowing the key.

likelihood: Lowseverity: High
01

weaknesses (3)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.