| 名称 |
File Discovery |
|
| 攻击可能性 |
典型严重性 |
| High |
Very Low |
|
| 摘要 |
An adversary engages in probing and exploration activities to determine if common key files exists. Such files often contain configuration and security parameters of the targeted application, system or network. Using this knowledge may often pave the way for more damaging attacks. |
| 前置条件 |
The adversary must know the location of these common key files. |
| 解决方案 | Leverage file protection mechanisms to render these files accessible only to authorized parties. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-200 |
Exposure of Sensitive Information to an Unauthorized Actor |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-169 |
An adversary engages in probing and exploration activities to identify constituents and properties of the target. |
|
| 分类体系：ATTACK |
|
条目编号
|
条目名称
|
| 1083 |
File and Directory Discovery |
|