CAPEC Definitions

    CAPEC Definitions / CAPEC-143

    CAPEC-143: Detect Unpublicized Web Pages

    An adversary searches a targeted web site for web pages that have not been publicized. In doing this, the adversary may be able to gain access to information that the targeted site did not intend to make public.

    Severity:Low
    Possibility:

    Extended Description

    No Extended Description.

    Mitigations

    No Mitigations found.

    Relationships with other CAPECs

    CAPEC-150: Collect Data from Common Resource Locations

    Details

    Prerequisites

    The targeted web site must include pages within its published tree that are not connected to its tree of links. The sensitivity of the content of these pages determines the severity of this attack.

    Related Weaknesses

    CWE-425: Direct Request ('Forced Browsing')

    Details