CAPEC-234: Hijacking a privileged process

ID CAPEC-234
Typical Severity Medium
Status Draft

An adversary gains control of a process that is assigned elevated privileges in order to execute arbitrary code with those privileges. Some processes are assigned elevated privileges on an operating system, usually through association with a particular user, group, or role. If an attacker can hijack this process, they will be able to assume its level of privilege in order to execute their own code.

https://capec.mitre.org/data/definitions/234.html

Weaknesses

# ID Name Type
CWE-648 Incorrect Use of Privileged APIs weakness
CWE-732 Incorrect Permission Assignment for Critical Resource weakness
Loading...