CAPEC-476 Signature Spoofing by Misrepresentation
Abstraktion: detailedStatus: activeAn attacker exploits a weakness in the parsing or display code of the recipient software to generate a data blob containing a supposedly valid signature, but the signer's identity is falsely represented, which can lead to the attacker manipulating the recipient software or its victim user to perform compromising actions.
Wahrscheinlichkeit: LowSchweregrad: High
01
Schwächen (1)
Die CWE-Schwächeklassen, zu denen dies gehört.
02
verwandte Angriffsmuster (1)
Verwandte Einträge.
03
Quelle
Wo diese Definition veröffentlicht ist.