{"record":{"id":"CAPEC-554","title":"Functionality Bypass","type":"AttackPattern","source_url":"https://capec.mitre.org/data/definitions/554.html","snapshot":"capec.xml","status":"Draft","rights":"Source metadata only; source notices retained; no operational prose or payloads","review_status":"machine-extracted; source-specific checks passed, editorial review pending","abstraction":"Meta","source_version":"3.9"},"assertions":[{"id":"CAPEC-554:CWE-424","subject":"CAPEC-554","predicate":"related_weakness","object":"CWE-424","asserted_by":"CAPEC","source_url":"https://capec.mitre.org/data/definitions/554.html","snapshot":"capec.xml","evidence_locator":"Attack_Pattern[@ID='554']/Related_Weaknesses","qualification":"Catalog mapping; does not establish an incident or actor use","source_occurrences":1},{"id":"CAPEC-554:CWE-1299","subject":"CAPEC-554","predicate":"related_weakness","object":"CWE-1299","asserted_by":"CAPEC","source_url":"https://capec.mitre.org/data/definitions/554.html","snapshot":"capec.xml","evidence_locator":"Attack_Pattern[@ID='554']/Related_Weaknesses","qualification":"Catalog mapping; does not establish an incident or actor use","source_occurrences":1}],"source_snapshot":{"file":"capec.xml","url":"https://capec.mitre.org/data/xml/capec_latest.xml","sha256":"70279a2dff0cb0ad79e546adb07828335a704ad5210e047e09e986172fc9e34d","bytes":3849998,"checked_at":"2026-10-16T03:31:42Z"},"notices_url":"https://aol.pm/source-notices.txt","notices":"﻿<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<?xml version=\"1.0\"?>\n<html xmlns=\"http://www.w3.org/1999/xhtml\" xml:lang=\"en\" lang=\"en\">\n<head>\n\t<meta http-equiv=\"content-type\" content=\"text/html; charset=utf-8\" />\n\t<meta name=\"description\" content=\"Common Attack Pattern Enumeration and Classification (CAPEC) is a list of software weaknesses.\" />\n\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=Edge\">\n\t<link rel=\"shortcut icon\" href=\"/favicon.ico\" />\n\t<link href=\"/css/main.css?version=3.6.102121\" rel=\"stylesheet\" type=\"text/css\" />\n\t<!--[if IE]>\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/ie.css?version=1.7\" />\n\t<![endif]-->\n\t\n\t<script src=\"/includes/jquery.js\" language=\"JavaScript\" type=\"text/javascript\"></script>\n\t<script src=\"/includes/capec_minimizer.js\" language=\"JavaScript\" type=\"text/javascript\"></script>\n\t<script src=\"/includes/browserheight.js\" language=\"JavaScript\" type=\"text/javascript\"></script>\n\t<script src=\"/includes/cookie.js\" language=\"Javascript\" type=\"text/javascript\"></script>\n\t<script src=https://cmp.osano.com/AzyhULTdPkqmy4aDN/a02172fb-4011-47ed-b5ff-3ae82caa92f9/osano.js></script>\n\t<link href=\"/css/print.css?version=1.0\" rel=\"stylesheet\" media=\"print\" type=\"text/css\" />\n\t<noscript>\n\t<style>\n\t\t#script { visibility:collapse; visibility:hidden; font-size:0px; height:0px; width:0px  }\n\t\t#noscript { visibility:visible; font-size:inherit;  height:inherit; width:inherit}\n\t</style>\n\t</noscript>\n\t<title>CAPEC - \nTerms of Use</title>\n</head>\n\t<body bgcolor=\"#eeeeee\" onload=\"onloadCookie()\">\n\n<div style=\"background-color:#ffffff;\">\n<a name=\"top\" id=\"top\"></a>\n<div id=\"MastHead\">\n\t<table width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" summary=\"Masthead Table\">\n\t<tr>\n\t\t<th style=\"width:70%\"/>\n\t\t<th style=\"width:30%\"/>\n\t</tr>\n\t<tr>\n\t    <td align=\"left\" style=\"padding:20px 10px 10px 20px\" valign=\"middle\" nowrap=\"nowrap\">\n\t\t<a href=\"/index.html\" style=\"color:#32498D; text-decoration:none\">\n\t\t<div>\n\t\t<img src=\"/images/capec_logo_new2.gif\" width=\"160\" height=\"55\" style=\"float:left;border:0;margin-right:6px\" alt=\"CAPEC\" />\n\t\t<h1 style=\"color:#edef97;font-size:1.2em;font-family:'Verdana',sans-serif;text-shadow: 2px 2px #000;margin: .1em auto\">Common Attack Pattern Enumeration and Classification</h1>\n\t\t<p style=\"color:#fff;font-size:1em;text-shadow: 2px 2px #000;margin:.2em auto 0 auto\">A Community Resource for Identifying and Understanding Attacks</p>\n\t\t</a>\n\t\t</div>\n\t    </td>\n\t    <td>\n\t\t<div style=\"float:right;padding-top:0px;padding-right:14px;padding-bottom:0px;\"><a href=\"/about/new_to_capec.html\" title=\"New to CAPEC? Start Here\"><img src=\"/images/new_to_capec.png\" width=100\" height=\"100\" border=\"0\" alt=\"New to CAPEC? Start Here\" style=\"vertical-align:top\"/></a></div>\n\t    </td>\n\t</tr>\n\t</table>\n</div>\n\n<div id=\"HeaderBar\" class=\"noprint\">\n<table width=\"100%\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\" summary=\"Breadcrumbs and Search Table\">\n\t<tr>\n\t\t<td width=\"100%\" valign=\"middle\" align=\"left\" style=\"padding-left:10px; font-size:75%;\">\n\t\t<a href=\"/\" >Home</a>  &gt;  <a href=\"/about/index.html\" >About CAPEC</a>  &gt;  \n\r\nTerms of Use\r\n\t\t&nbsp;\n\t\t</td>\n\t\t<td valign=\"middle\" align=\"right\" nowrap=\"nowrap\" style=\"padding-right:12px\">\n\t\t\n<div class=\"noprint\" style=\"text-align:right\">\n  <form action=\"/cgi-bin/jumpmenu.cgi\" style=\"margin-bottom:0.1em;vertical-align:center;\">\n\t<label for=\"id\" style=\"padding-right:5px\">ID Lookup:</label>\n    <input id=\"id\" name=\"id\" type=\"text\" style=\"width:50px; font-size:80%\" maxlength=\"10\" />\n\t<input value=\"Go\" style=\"padding: 0px; font-size:80%\" type=\"submit\" />\n  </form>\n</div> \n \n\t\t</td>\n\t</tr>\n</table>\n</div> <!--//HeaderBar-->\n<div class=\"yesprint\">\n<hr width=\"100%\" size=\"1\" style=\"clear:both\" color=\"#000000\" />\n</div>\n\n<div class=\"topnav\">\n<ul>\n<li><a href=\"/index.html\">Home</a></li>\n<li>\n        <div class=\"dropdown\">\n          <a href=\"/about/index.html\"><button class=\"dropbtn\">About</button></a>\n          <div class=\"dropdown-content\">\n            <a href=\"/about/index.html\">Overview</a>\n            <a href=\"/about/board.html\">Board</a>\n            <a href=\"/about/glossary.html\">Glossary</a>\n            <a href=\"/about/use_cases.html\">Use Cases</a>\n            <a href=\"/about/resources.html\">Resources</a>\n            <a href=\"/about/documents.html\">Documents</a>\n            <a href=\"/about/faq.html\">FAQs</a>\n            <a href=\"/about/new_to_capec.html\">New to CAPEC?</a>\n          </div>\n        </div>\n</li>\n\n<li>\n        <div class=\"dropdown\">\n          <a href=\"/data/index.html\"><button class=\"dropbtn\">CAPEC List</button></a>\n          <div class=\"dropdown-content\">\n            <a href=\"/data/index.html\">Latest Version</a>\n            <a href=\"/data/downloads.html\">Downloads</a>\n            <a href=\"/data/reports.html\">Reports</a>\n            <a href=\"/data/archive.html\">Archive</a>\n          </div>\n        </div>\n</li>\n<li>\n        <div class=\"dropdown\">\n          <a href=\"/community/index.html\"><button class=\"dropbtn\">Community</button></a>\n          <div class=\"dropdown-content\">\n            <a href=\"/community/index.html\">Community</a>\n            <a href=\"/community/citations.html\">Citations</a>\n            <a href=\"/community/usage.html\">Organization Usage</a>\n            <a href=\"/community/related.html\">Related Activities</a>\n            <a href=\"/community/registration.html\">Discussion List</a>\n            <a href=\"https://www.mail-archive.com/capec-research-list@mitre.org/\" target=\"_blank\" rel=\"noopener noreferrer\">Discussion Archives</a>\n            <a href=\"/about/documents.html#capec_user_summit\">CAPEC User Summit</a>\t            \n          </div>\n        </div>\n</li>\n<li>\n        <div class=\"dropdown\">\n          <a href=\"/news/index.html\"><button class=\"dropbtn\">News</button></a>\n          <div class=\"dropdown-content\">\n            <a href=\"/news/index.html\">Current News</a>\n            <a href=\"https://twitter.com/CweCapec\" target=\"_blank\" rel=\"noopener noreferrer\">CAPEC on Twitter<img src=\"/images/twitter_sm.png\" border=\"0\" title=\"Twitter\" style=\"position:relative; vertical-align:bottom; padding-left:3px; top:-1px\"></a>\n            <a href=\"https://www.linkedin.com/showcase/cve-cwe-capec\" target=\"_blank\" rel=\"noopener noreferrer\">CAPEC on LinkedIn<img src=\"/images/linkedin_sm.jpg\" alt=\"LinkedIn\"  width=\"12\" height=\"12\" style=\"position:relative; vertical-align:bottom; padding-left:3px; top:-1px\"></a>\n            <a href=\"https://medium.com/@CWE_CAPEC\" target=\"_blank\" rel=\"noopener noreferrer\">CAPEC Blog <img src=\"/images/medium.png\" alt=\"Medium\" width=\"12\" height=\"12\" style=\"position:relative; vertical-align:bottom; padding-left:3px; top:-1px\"></a>            \n            <a href=\"https://outofbounds.buzzsprout.com/\" target=\"_blank\" rel=\"noopener noreferrer\">CAPEC Podcast<img src=\"/images/out_of_bounds_read_logo_B_W.png\" alt=\"Out of Bounds Read Podcast\"  width=\"15\" height=\"15\" style=\"position:relative; vertical-align:bottom; padding-left:3px; top:-1px\"></a>\n            <a href=\"https://www.youtube.com/channel/UCpY9VIpRmFK4ebD6orssifA\" target=\"_blank\" rel=\"noopener noreferrer\">CAPEC on YouTube<img src=\"/images/youtube.png\" alt=\"YouTube\"  width=\"12\" height=\"12\" style=\"position:relative; vertical-align:bottom; padding-left:3px; top:-1px\"></a>\n            <a href=\"/news/archives/index.html\">News Archive</a>\n          </div>\n        </div>\n</li>\n<li style=\"border-color:#aaaaaa\"><a href=\"/find/index.html\">Search</a></li>\n</ul>\n</div>\n\n\n<table width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" id=\"MainPane\"> \n  <tr>\n\t<!-- begin left side menu -->\n    <td valign=\"top\" rowspan=\"2\" id=\"LeftPane\">\n\t<!--include virtual=\"/includes/leftsidemenu.html\" -->\n\t<script type=\"text/javascript\">browserheight();</script>\n\t</td>\n\t<!-- end left side menu -->\n    <td style=\"height:1px\"></td>\n\t<!-- begin right column -->\n\t<td valign=\"top\" align=\"center\" rowspan=\"2\" nowrap=\"nowrap\" id=\"RightPane\">\n\r\n\t</td>\r\n\t<!-- end right side menu -->\r\n  </tr>\r\n  <tr>\r\n\t<!-- begin content pane -->\r\n    <td valign=\"top\" id=\"Contentpane\" width=\"100%\" style=\"word-wrap:break-word\">\r\n    <script type=\"text/javascript\">\r\n\t\t$(\"#Contentpane\").css('max-width', ($(window).width()-230) + 'px');\r\n\t</script>\r\n\r\n\r\n<!--begin Main Content-->\r\n<h2>Terms of Use</h2>\r\n\r\n<h3>LICENSE</h3>\r\n<p>The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use Common Attack Pattern Enumeration and Classification (CAPEC&trade;) for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE&#8217;s copyright designation and this license in any such copy.</p>\r\n\r\n<h3>DISCLAIMERS</h3>\r\n<p>ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN ARE PROVIDED ON AN &quot;AS IS&quot; BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.</p>\r\n\r\n<span style=\"padding-bottom:750px\"></span>\r\n\r\n\r\n<!--end Main Content-->\r\n\r\n\t <div id=\"More_Message\">\r\n<div style=\"background-color:#33332C; padding:2px; color:#ffffff; font-size:95%; text-align:center\" >More information is available &mdash; Please select a different filter.</div></div>\r\n\r\n\t</td>\r\n\t<!-- end content pane -->\r\n  </tr>\r\n</table>\r\n<div id=\"FootPane\" class=\"noprint\">\r\n  <div id=\"footbar\">\r\n    <b>Page Last Updated or Reviewed: </b>\r\n\r\n April 04, 2019\r\n  </div>\n  <div class=\"Footer noprint\">\n    <table width=\"100%\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" class=\"ltgreybackground\" style=\"clear:both\" summary=\"Footer Table\">\n      <tr>\n        <td colspan=\"3\" id=\"line\"><div class=\"line\">&nbsp;</div></td>\n      </tr>\n      <tr>\n        <td valign=\"middle\" nowrap=\"nowrap\">\n          <div id=\"footerlinks\" class=\"footlogo\">\n            <a href=\"https://www.mitre.org\" target=\"_blank\"><img src=\"/images/mitre_logo.gif\" height=\"36\" border=\"0\" alt=\"MITRE\"/></a>\n          </div>\n        </td>\n        <td width=\"100%\" valign=\"top\" style=\"padding:6px 0px;\">\n          <div id=\"footerlinks\">\n            <a href=\"/sitemap.html\">Site Map</a> |\n            <a href=\"/about/termsofuse.html\">Terms of Use</a> |\n            <a href=\"#\" onclick=\"Osano.cm.showDrawer('osano-cm-dom-info-dialog-open')\">Manage Cookies</a> |\n            <a target=\"_blank\" href=\"/about/cookie_notice.html\">Cookie Notice</a> |            \n            <a target=\"_blank\" href=\"https://cwe.mitre.org/about/privacy_policy.html\">Privacy Policy</a> |\n            <a href=\"mailto:capec@mitre.org\">Contact Us</a> |\n            <a target=\"_blank\" href=\"https://twitter.com/CweCapec\"><img src=\"/images/twitter.jpg\" width=\"20\" height=\"20\" style=\"border:0;vertical-align:right;\" alt=\"CAPEC on Twitter\" title=\"CAPEC on Twitter\"></a>\n            <a target=\"_blank\" href=\"https://www.linkedin.com/showcase/cve-cwe-capec\"><img src=\"/images/linkedin_sm.jpg\" width=\"20\" height=\"20\" style=\"border:0;vertical-align:right;\" alt=\"CAPEC on LinkedIn\" title=\"CAPEC on LinkedIn\"></a>\n            <a target=\"_blank\" href=\"https://www.youtube.com/channel/UCpY9VIpRmFK4ebD6orssifA\"><img src=\"/images/youtube.png\" width=\"20\" height=\"20\" style=\"border:0;vertical-align:right;\" alt=\"CAPEC on YouTube\" title=\"CAPEC on YouTube\"></a>\n            <a target=\"_blank\" href=\"https://outofbounds.buzzsprout.com/\"><img src=\"/images/out_of_bounds_read_sm.png\" width=\"20\" height=\"20\" style=\"border:0;vertical-align:right;\" alt=\"CAPEC Out-of-Bounds-Read Podcast\" title=\"CAPEC Out-of-Bounds-Read Podcast\"></a>\n            <a target=\"_blank\" href=\"https://medium.com/@CWE_CAPEC\"><img src=\"/images/medium.png\" width=\"20\" height=\"20\" style=\"border:0;vertical-align:right;\" alt=\"CAPEC Blog on Medium\" title=\"CAPEC Blog on Medium\"></a>                        \n          </div>\n          <p>Use of the Common Attack Pattern Enumeration and Classification (CAPEC), and the associated references from this website are subject to the <a href=\"/about/termsofuse.html\">Terms of Use</a>. Copyright &copy; 2007&ndash;2026, The MITRE Corporation. CAPEC and the CAPEC logo are trademarks of The MITRE Corporation.</p>\n        </td>\n        <td valign=\"middle\" nowrap=\"nowrap\">\n          <div id=\"footerlinks\" class=\"footlogo\">\n            <a href=\"https://www.dhs.gov/science-and-technology/hssedi\" target=\"_blank\" rel=\"noopener noreferrer\"><img src=\"/images/hssedi.png\" height=\"36\" border=\"0\" alt=\"HSSEDI\" title=\"HSSEDI\"/></a>\n          </div>\n        </td>\n      </tr>\n    </table>\n  </div>\n</div>\n<!-- Osano Code -->\n<script src=https://cmp.osano.com/AzyhULTdPkqmy4aDN/a02172fb-4011-47ed-b5ff-3ae82caa92f9/osano.js></script>\n\n<!-- Google tag (gtag.js) -->\n<script async src=\"https://www.googletagmanager.com/gtag/js?id=G-SB6E7FR4V4\"></script>\n<script>\n  window.dataLayer = window.dataLayer || [];\n  function gtag(){dataLayer.push(arguments);}\n  gtag('js', new Date());\n\n  gtag('config', 'G-SB6E7FR4V4');\n</script>\n\n</body>\n</html>\n\r\n"}