CAPEC-480 Escaping Virtualization
Abstraktion: standardStatus: activeAn adversary gains access to an application, service, or device with the privileges of an authorized or privileged user by escaping the confines of a virtualized environment. The adversary is then able to access resources or execute unauthorized code within the host environment, generally with the privileges of the user running the virtualized process. Successfully executing an attack of this type is often the first step in executing more complex attacks.
Wahrscheinlichkeit: LowSchweregrad: Very High
01
Schwächen (1)
Die CWE-Schwächeklassen, zu denen dies gehört.
02
ATT&CK-Techniken
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
03
verwandte Angriffsmuster (2)
Verwandte Einträge.
04
Quelle
Wo diese Definition veröffentlicht ist.