This page is experimental and may change significantly in future releases.
Channel Accessible by Non-Endpoint
Properties
id: d3f:CWE-300
- name
- Channel Accessible by Non-Endpoint
- definition
- The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.
- synonyms
- On-path attack
- synonyms
- Man-in-the-Middle / MITM
- synonyms
- Person-in-the-Middle / PITM
- synonyms
- Adversary-in-the-Middle / AITM
- synonyms
- Interception attack
- synonyms
- Manipulator-in-the-Middle
- synonyms
- Monster-in-the-Middle
- synonyms
- Monkey-in-the-Middle
Neighbors
CWE-300 has no direct neighbors in this release.Inferred Relationships
Related Countermeasure Techniques
Related Weaknesses
CWE-300 has no related weaknesses in this release.