CAPEC-476 Signature Spoofing by Misrepresentation

Abstraktion: detailedStatus: active

An attacker exploits a weakness in the parsing or display code of the recipient software to generate a data blob containing a supposedly valid signature, but the signer's identity is falsely represented, which can lead to the attacker manipulating the recipient software or its victim user to perform compromising actions.

Wahrscheinlichkeit: LowSchweregrad: High
01

Schwächen (1)

Die CWE-Schwächeklassen, zu denen dies gehört.

02

verwandte Angriffsmuster (1)

Verwandte Einträge.

03

Quelle

Wo diese Definition veröffentlicht ist.