Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CAPEC-5:Blue Boxing
Attack Pattern ID:5
Version:v3.9
Attack Pattern Name:Blue Boxing
Abstraction:Detailed
Status:Obsolete
Likelihood of Attack:Medium
Typical Severity:Very High
DetailsContent HistoryRelated WeaknessesReports
1Weaknesses found
CWE-285
Improper Authorization
ShareView Details
Improper Authorization
Likelihood of Exploit-High
Mapping-Discouraged
Abstraction-Class
Found in835CVEs

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

Impacts-
Read Application DataGain Privileges or Assume IdentityRead Files or DirectoriesModify Files or DirectoriesModify Application Data
Tags-
Web ServerDatabase ServerHigh exploitLibraries or FrameworksModify Application Data (impact)Read Files or Directories (impact)Modify Files or Directories (impact)Read Application Data (impact)Gain Privileges or Assume Identity (impact)
As Seen In-
Not Available