CAPEC-59 Session Credential Falsification through Prediction

abstraction: detailedstatus: active

This attack targets predictable session ID in order to gain privileges. The attacker can predict the session ID used during a transaction to perform spoofing and session hijacking.

likelihood: Highseverity: High
01

weaknesses (11)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.