CAPEC-57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data
abstraction: detailedstatus: activeThis attack utilizes a REST(REpresentational State Transfer)-style applications' trust in the system resources and environment to obtain sensitive data once SSL is terminated.
likelihood: Mediumseverity: Very High
01
weaknesses (3)
The CWE weakness classes this flaw belongs to.
02
ATT&CK techniques
ATT&CK techniques this enables or maps to.
03
related attack patterns (1)
Related entries.
04
source
Where this definition is published.