Meta attack pattern
Stable
CAPEC-212: Functionality Misuse
An adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact. The system functionality is not altered or modified but used in a way that was not intended. This is often accomplished through the overuse of a specific functionality or by leveraging functionality with design flaws that enables the adversary to gain access to unauthorized, sensitive data.
Medium
Typical severity
Per MITRE
Medium
Likelihood of attack
Per MITRE
3
Related weaknesses
CWEs this targets
Meta
Abstraction
MITRE classification
Overview
CAPEC-212 (Functionality Misuse) is a meta-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.