Standard attack pattern
Draft
CAPEC-75: Manipulating Writeable Configuration Files
Generally these are manually edited files that are not in the preview of the system administrators, any ability on the attackers' behalf to modify these files, for example in a CVS repository, gives unauthorized access directly to the application, the same as authorized users.
Very High
Typical severity
Per MITRE
High
Likelihood of attack
Per MITRE
6
Related weaknesses
CWEs this targets
Standard
Abstraction
MITRE classification
Overview
CAPEC-75 (Manipulating Writeable Configuration Files) is a standard-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.