Channel Accessible by Non-Endpoint

Properties


name
Channel Accessible by Non-Endpoint
definition
The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.
synonyms
On-path attack
synonyms
Man-in-the-Middle / MITM
synonyms
Person-in-the-Middle / PITM
synonyms
Adversary-in-the-Middle / AITM
synonyms
Interception attack
synonyms
Manipulator-in-the-Middle
synonyms
Monster-in-the-Middle
synonyms
Monkey-in-the-Middle

Neighbors

CWE-300 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.