CAPEC Definitions
CAPEC Definitions / CAPEC-144
CAPEC-144: Detect Unpublicized Web Services
An adversary searches a targeted web site for web services that have not been publicized. This attack can be especially dangerous since unpublished but available services may not have adequate security controls placed upon them given that an administrator may believe they are unreachable.
Severity:Low
Possibility:
Extended Description
No Extended Description.
Mitigations
No Mitigations found.
Relationships with other CAPECs
CAPEC-150: Collect Data from Common Resource Locations
Prerequisites
The targeted web site must include unpublished services within its web tree. The nature of these services determines the severity of this attack.
Related Weaknesses
CWE-425: Direct Request ('Forced Browsing')
