CAPEC Definitions

    CAPEC Definitions / CAPEC-51

    CAPEC-51: Poison Web Service Registry

    SOA and Web Services often use a registry to perform look up, get schema information, and metadata about services. A poisoned registry can redirect (think phishing for servers) the service requester to a malicious service provider, provide incorrect information in schema or metadata, and delete information about service provider interfaces.

    Severity:Very High
    Possibility:High

    Extended Description

    WS-Addressing is used to virtualize services, provide return addresses and other routing information, however, unless the WS-Addressing headers are protected they are vulnerable to rewriting. Content in a registry is deployed by the service provider. The registry in an SOA or Web Services system can be accessed by the service requester via UDDI or other protocol.

    Mitigations

    Design: Enforce principle of least privilege

    Design: Harden registry server and file access permissions

    Implementation: Implement communications to and from the registry using secure protocols

    Relationships with other CAPECs

    CAPEC-203: Manipulate Registry Information

    Prerequisites

    The attacker must be able to write to resources or redirect access to the service registry.

    Related Weaknesses

    CWE-285: Improper Authorization

    CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

    CWE-693: Protection Mechanism Failure