CAPEC-60 Reusing Session IDs (aka Session Replay)
abstraction: detailedstatus: activeThis attack targets the reuse of valid session ID to spoof the target system in order to gain privileges. The attacker tries to reuse a stolen session ID used previously during a transaction to perform spoofing and session hijacking. Another name for this type of attack is Session Replay.
likelihood: Highseverity: High
01
weaknesses (10)
The CWE weakness classes this flaw belongs to.
02
ATT&CK techniques
ATT&CK techniques this enables or maps to.
03
related attack patterns (1)
Related entries.
04
source
Where this definition is published.