CAPEC-200 Removal of filters: Input filters, output filters, data masking

Abstraktion: detailedStatus: active

An attacker removes or disables filtering mechanisms on the target application. Input filters prevent invalid data from being sent to an application (for example, overly large inputs that might cause a buffer overflow or other malformed inputs that may not be correctly handled by an application). Input filters might also be designed to constrained executable content.

Schweregrad: Medium
01

verwandte Angriffsmuster (1)

Verwandte Einträge.

02

Quelle

Wo diese Definition veröffentlicht ist.