CAPEC Definitions
CAPEC Definitions / CAPEC-154
CAPEC-154: Resource Location Spoofing
An adversary deceives an application or user and convinces them to request a resource from an unintended location. By spoofing the location, the adversary can cause an alternate resource to be used, often one that the adversary controls and can be used to help them achieve their malicious goals.
Severity:Medium
Possibility:Medium
Extended Description
No Extended Description.
Mitigations
Monitor network activity to detect any anomalous or unauthorized communication exchanges.
Relationships with other CAPECs
No related CAPECs found.
Prerequisites
None. All applications rely on file paths and therefore, in theory, they or their resources could be affected by this type of attack.
Related Weaknesses
CWE-451: User Interface (UI) Misrepresentation of Critical Information
