Detailed attack pattern
Draft
CAPEC-678: System Build Data Maliciously Altered
During the system build process, the system is deliberately misconfigured by the alteration of the build data. Access to system configuration data files and build processes is susceptible to deliberate misconfiguration of the system.
Last updated
High
Typical severity
Per MITRE
Low
Likelihood of attack
Per MITRE
0
Related weaknesses
CWEs this targets
Detailed
Abstraction
MITRE classification
Overview
CAPEC-678 (System Build Data Maliciously Altered) is a detailed-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.
What the attacker needs
Prerequisites
- An adversary has access to the data files and processes used for executing system configuration and performing the build.
Consequences
What a successful CAPEC-678 attack can achieve.
Execute Unauthorized Commands
Affects: Integrity
Gain Privileges
Affects: Access Control
Modify Data, Read Data
Affects: Confidentiality
How to mitigate it
Defenses that reduce the risk of CAPEC-678.
- Implement configuration management security practices that protect the integrity of software and associated data.
- Monitor and control access to the configuration management system.
- Harden centralized repositories against attack.
- Establish acceptance criteria for configuration management check-in to assure integrity.
- Plan for and audit the security of configuration management administration processes.
- Maintain configuration control over operational systems.