CAPEC-93 Log Injection-Tampering-Forging
Abstraktion: detailedStatus: activeThis attack targets the log files of the target host. The attacker injects, manipulates or forges malicious log entries in the log file, allowing them to mislead a log audit, cover traces of attack, or perform other malicious actions. The target host is not properly controlling log access. As a result tainted data is resulting in the log files leading to a failure in accountability, non-repudiation and incident forensics capability.
Wahrscheinlichkeit: HighSchweregrad: High
01
Schwächen (3)
Die CWE-Schwächeklassen, zu denen dies gehört.
02
verwandte Angriffsmuster (1)
Verwandte Einträge.
03
Quelle
Wo diese Definition veröffentlicht ist.