CAPEC-639 Probe System Files

abstraction: detailedstatus: active

An adversary obtains unauthorized information due to improperly protected files. If an application stores sensitive information in a file that is not protected by proper access control, then an adversary can access the file and search for sensitive information.

severity: Medium
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

ATT&CK techniques

ATT&CK techniques this enables or maps to.

03

related attack patterns (1)

Related entries.

04

source

Where this definition is published.

MITRE CAPEC