CAPEC-59 Session Credential Falsification through Prediction
abstraction: detailedstatus: activeThis attack targets predictable session ID in order to gain privileges. The attacker can predict the session ID used during a transaction to perform spoofing and session hijacking.
likelihood: Highseverity: High
01
weaknesses (11)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (1)
Related entries.
03
source
Where this definition is published.