Free scan↗
  • English
  • Deutsch

CAPEC-94 Adversary in the Middle (AiTM)

abstraction: metastatus: active
likelihood: Highseverity: Very High
01

weaknesses (5)

The CWE weakness classes this flaw belongs to.

  • CWE-287Improper Authentication
  • CWE-290Authentication Bypass by Spoofing
  • CWE-294Authentication Bypass by Capture-replay
  • CWE-300Channel Accessible by Non-Endpoint
  • CWE-593Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created
02

ATT&CK techniques

ATT&CK techniques this enables or maps to.

  • T1557Adversary-in-the-Middle
03

related attack patterns (6)

Related entries.

  • CAPEC-219XML Routing Detour Attacks
  • CAPEC-384Application API Message Manipulation via Man-in-the-Middle
  • CAPEC-386Application API Navigation Remapping
  • CAPEC-466Leveraging Active Adversary in the Middle Attacks to Bypass Same Origin Policy
  • CAPEC-662Adversary in the Browser (AiTB)
  • CAPEC-701Browser in the Middle (BiTM)
04

source

Where this definition is published.

MITRE CAPEC↗
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…