CAPEC-653 Use of Known Operating System Credentials

abstraction: standardstatus: active

An adversary guesses or obtains (i.e. steals or purchases) legitimate operating system credentials (e.g. userID/password) to achieve authentication and to perform authorized actions on the system, under the guise of an authenticated user or service. This applies to any Operating System.

likelihood: Highseverity: High
01

weaknesses (7)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (3)

Related entries.

03

source

Where this definition is published.