CAPEC-261 Fuzzing for garnering other adjacent user/sensitive data
Abstraktion: detailedStatus: activeAn adversary who is authorized to send queries to a target sends variants of expected queries in the hope that these modified queries might return information (directly or indirectly through error logs) beyond what the expected set of queries should provide.
Schweregrad: Medium
01
Schwächen (1)
Die CWE-Schwächeklassen, zu denen dies gehört.
02
verwandte Angriffsmuster (1)
Verwandte Einträge.
03
Quelle
Wo diese Definition veröffentlicht ist.