CAPEC Definitions
CAPEC Definitions / CAPEC-497
CAPEC-497: File Discovery
An adversary engages in probing and exploration activities to determine if common key files exists. Such files often contain configuration and security parameters of the targeted application, system or network. Using this knowledge may often pave the way for more damaging attacks.
Severity:Very Low
Possibility:High
Extended Description
No Extended Description.
Mitigations
Leverage file protection mechanisms to render these files accessible only to authorized parties.
Relationships with other CAPECs
CAPEC-169: Footprinting
Prerequisites
The adversary must know the location of these common key files.
Related Weaknesses
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
