CAPEC-466: Leveraging Active Adversary in the Middle Attacks to Bypass Same Origin Policy
Description
An attacker leverages an adversary in the middle attack (CAPEC-94) in order to bypass the same origin policy protection in the victim's browser. This active adversary in the middle attack could be launched, for instance, when the victim is connected to a public WIFI hot spot. An attacker is able to intercept requests and responses between the victim's browser and some non-sensitive website that does not use TLS.
- Likelihood of attack
- Not rated by MITRE
- Typical severity
- Medium
- Abstraction
- StandardA specific methodology or technique used in an attack.
Mechanism of attack: Subvert Access Control
Prerequisites
- The victim and the attacker are both in an environment where an active adversary in the middle attack is possible (e.g., public WIFI hot spot)The victim visits at least one website that does not use TLS / SSL
Skills required
- LowAbility to intercept and modify requests / responses
- MediumAbility to create iFrame and JavaScript code that would initiate unauthorized requests to sensitive sites from the victim's browser
- MediumSolid understanding of the HTTP protocol
Consequences
- Confidentiality
Read Data
- Authorization
Execute Unauthorized Commands
Mitigations
- Design: Tunnel communications through a secure proxy
- Design: Trust level separation for privileged / non privileged interactions (e.g., two different browsers, two different users, two different operating systems, two different virtual machines)