| 名称 |
Resource Location Spoofing |
|
| 攻击可能性 |
典型严重性 |
| Medium |
Medium |
|
| 摘要 |
An adversary deceives an application or user and convinces them to request a resource from an unintended location. By spoofing the location, the adversary can cause an alternate resource to be used, often one that the adversary controls and can be used to help them achieve their malicious goals. |
| 前置条件 |
None. All applications rely on file paths and therefore, in theory, they or their resources could be affected by this type of attack. |
| 解决方案 | Monitor network activity to detect any anomalous or unauthorized communication exchanges. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-451 |
User Interface (UI) Misrepresentation of Critical Information |
|