CAPEC Details
Name Content Spoofing
Likelyhood of attack Typical severity
Medium Medium
Summary An adversary modifies content to make it contain something other than what the original content producer intended while keeping the apparent source of the content unchanged. The term content spoofing is most often used to describe modification of web pages hosted by a target to display the adversary's content instead of the owner's content. However, any content can be spoofed, including the content of email messages, file transfers, or the content of other network communication protocols. Content can be modified at the source (e.g. modifying the source file for a web page) or in transit (e.g. intercepting and modifying a message between the sender and recipient). Usually, the adversary will attempt to hide the fact that the content has been modified, but in some cases, such as with web site defacement, this is not necessary. Content Spoofing can lead to malware exposure, financial fraud (if the content governs financial transactions), privacy violations, and other unwanted outcomes.
Prerequisites The target must provide content but fail to adequately protect it against modification.The adversary must have the means to alter data to which they are not authorized. If the content is to be modified in transit, the adversary must be able to intercept the targeted messages.
Solutions
Related Weaknesses
CWE ID Description
CWE-345 Insufficient Verification of Data Authenticity
Taxonomy: ATTACK
Entry ID Entry Name
1491 Defacement
Taxonomy: WASC
Entry ID Entry Name
12 Content Spoofing
Taxonomy: OWASP Attacks
Entry ID Entry Name
Link Content Spoofing