| 名称 |
Drop Encryption Level |
|
|
| 摘要 |
An attacker forces the encryption level to be lowered, thus enabling a successful attack against the encrypted data. |
| 前置条件 |
|
| 解决方案 | |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-757 |
Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-212 |
An adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact. The system functionality is not altered or modified but used in a way that was not intended. This is often accomplished through the overuse of a specific functionality or by leveraging functionality with design flaws that enables the adversary to gain access to unauthorized, sensitive data. |
|
| 分类体系：ATTACK |
|
条目编号
|
条目名称
|
| 1600 |
Weaken Encryption |
|