Source assertions are not new attribution claims. No sole inventor or transitive actor-CVE inference. { "record": { "id": "CWE-291", "title": "Reliance on IP Address for Authentication", "type": "Weakness", "source_url": "https://cwe.mitre.org/data/definitions/291.html", "snapshot": "cwe.xml", "status": "Incomplete", "rights": "Source metadata only; source notices retained; no operational prose or payloads", "review_status": "machine-extracted; source-specific checks passed, editorial review pending", "abstraction": "Variant", "source_version": "4.20" }, "assertions": [ { "id": "CAPEC-4:CWE-291", "subject": "CAPEC-4", "predicate": "related_weakness", "object": "CWE-291", "asserted_by": "CAPEC", "source_url": "https://capec.mitre.org/data/definitions/4.html", "snapshot": "capec.xml", "evidence_locator": "Attack_Pattern[@ID='4']/Related_Weaknesses", "qualification": "Catalog mapping; does not establish an incident or actor use", "source_occurrences": 1 } ], "source_snapshot": { "file": "cwe.xml", "derived_from": "cwe.zip", "member": "cwec_v4.20.xml", "sha256": "1f5a78bd62e00f86436b4fe32d5034a57e8f0da88e4063b2072b664ae510912e", "bytes": 18192305 }, "notices_url": "https://aol.pm/source-notices.txt", "notices": "\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n \n\t\n\t \t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\tCWE - \nTerms of Use\n\n\n\n\t
\n\t\n\t
\n\t \n\t \"CWE\"\n\t

Common Weakness Enumeration

\n\t

Celebrating 20 years of community-developed cybersecurity weakness knowledge!

\n\t \n\t
\n\t
\"New
\n\t
\"CWE
\n\t
\"CWE
\n\n\t
\n\n\n
\n \n\t \n\t\t\r\n\t\t\r\n\t\r\n
\n Home > About CWE > \n\nTerms of Use\n \r\n\t\t\r\n\t\t\n
\n
\n\tID \n \n\t\n
\n
\n \r\n\t\t
\r\n
\r\n
\r\n
\r\n
\r\n\r\n
\r\n\r\n\r\n
\r\n\r\n\r\n \r\n\t\r\n \r\n\t\r\n \r\n\t\r\n\t\r\n\t\r\n \r\n \r\n\t\r\n \r\n\t\r\n \r\n
\r\n\t \r\n\t\r\n\t\r\n\r\n\n\t
\r\n\t\r\n\t\r\n\t\r\n
\r\n\r\n\r\n\r\n\r\n\r\n\r\n
CWE Glossary Definition
\"x\"
\r\n
\r\n
\r\n
\r\n\n\n\n

Terms of Use

\n

CWE™ is free to use by any organization or individual for any research, development, and/or commercial purposes, per these CWE Terms of Use. Accordingly, The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. Any copy you make for such purposes is authorized on the condition that you reproduce MITRE’s copyright designation and this license in any such copy. CWE is a trademark of The MITRE Corporation. Please contact cwe@mitre.org if you require further clarification on this issue.

\n\n

DISCLAIMERS

\n\n

By accessing information through this site you (as “the user”) hereby agrees the site and the information is provided on an “as is” basis only without warranty of any kind, express or implied, including but not limited to implied warranties of merchantability, availability, accuracy, noninfringement, or fitness for a particular purpose. Use of this site and the information is at the user’s own risk. The user shall comply with all applicable laws, rules, and regulations, and the data source’s restrictions, when using the site.

\n\n

By contributing information to this site you (as “the contributor”) hereby represents and warrants the contributor has obtained all necessary permissions from copyright holders and other third parties to allow the contributor to contribute, and this site to host and display, the information and any such contribution, hosting, and displaying will not violate any law, rule, or regulation. Additionally, the contributor hereby grants all users of such information a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such information and all derivative works.

\n\n

The MITRE Corporation expressly disclaims any liability for any damages arising from the contributor’s contribution of such information, the user’s use of the site or such information, and The MITRE Corporation’s hosting the tool and displaying the information. The foregoing disclaimer specifically includes but is not limited to general, consequential, indirect, incidental, exemplary, or special or punitive damages (including but not limited to loss of income, program interruption, loss of information, or other pecuniary loss) arising out of use of this information, no matter the cause of action, even if The MITRE Corporation has been advised of the possibility of such damages.

\n\n\n\n\t
\n
More information is available — Please edit the custom filter or select a different filter.
\n\r\n\t
\r\n
\r\n
\r\n Page Last Updated: \r\n\nJuly 20, 2023\n
\n
\n \n \n \n \n \n \n \n \n \n \n
 
\n
\n \"MITRE\"\n
\n 		\n
\n Site Map | \n Terms of Use | \n Manage Cookies | \n Cookie Notice | \n Privacy Policy | \n Contact Us | \n \"CWE\n \"CWE\n \"CWE\n \"CWE\n \"CWE \n \"CWE \n\t\t\t \"CWE \n
\n

Use of the Common Weakness Enumeration (CWE™) and the associated references from this website are subject to the Terms of Use. CWE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and managed by the Homeland Security Systems Engineering and Development Institute (HSSEDI) which is operated by The MITRE Corporation (MITRE). Copyright © 2006–2026, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.

\n 		\n
\n \"HSSEDI\"\n
\n
\n
\n
\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\tCAPEC - \nTerms of Use\n\n\t\n\n
\n\n
\n\t\n\t\n\t\t\n\t\n\t \n\t \n\t\n\t
\n\t\t\n\t
\n\t\t\n\t\t\n\t \n\t\t
\"New
\n\t
\n
\n\n
\n\n\t\n\t\t\n\t\t\n\t\n
\n\t\tHome > About CAPEC > \n\r\nTerms of Use\r\n\t\t \n\t\t\n\t\t\n
\n
\n\t\n \n\t\n
\n
\n \n\t\t
\n
\n
\n
\n
\n\n
\n\n
\n\n\n \n \n\t\n \n\t\n \n\t\n\t\r\n\t\r\n \r\n \r\n\t\r\n \r\n\t\r\n \r\n
\n\t\n\t\n\t\n\r\n\t
\r\n \r\n\r\n\r\n\r\n

Terms of Use

\r\n\r\n

LICENSE

\r\n

The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use Common Attack Pattern Enumeration and Classification (CAPEC™) for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE’s copyright designation and this license in any such copy.

\r\n\r\n

DISCLAIMERS

\r\n

ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN ARE PROVIDED ON AN "AS IS" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

\r\n\r\n\r\n\r\n\r\n\r\n\r\n\t
\r\n
More information is available — Please select a different filter.
\r\n\r\n\t
\r\n
\r\n
\r\n Page Last Updated or Reviewed: \r\n\r\n April 04, 2019\r\n
\n
\n \n \n \n \n \n \n \n \n \n
 
\n
\n \"MITRE\"/\n
\n 		\n
\n Site Map |\n Terms of Use |\n Manage Cookies |\n Cookie Notice | \n Privacy Policy |\n Contact Us |\n \"CAPEC\n \"CAPEC\n \"CAPEC\n \"CAPEC\n \"CAPEC \n
\n

Use of the Common Attack Pattern Enumeration and Classification (CAPEC), and the associated references from this website are subject to the Terms of Use. Copyright © 2007–2026, The MITRE Corporation. CAPEC and the CAPEC logo are trademarks of The MITRE Corporation.

\n 		\n
\n \"HSSEDI\"\n
\n
\n
\n
\n\n\n\n\n\n\n\n\n\n\r\n" } CWE - Terms of Use
CWE

Common Weakness Enumeration

Celebrating 20 years of community-developed cybersecurity weakness knowledge!
New to CWE? click here!
CWE Most Important Hardware Weaknesses
CWE Top 25 Most Dangerous Weaknesses
Home > About CWE > Terms of Use  
ID

Terms of Use

CWE™ is free to use by any organization or individual for any research, development, and/or commercial purposes, per these CWE Terms of Use. Accordingly, The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. Any copy you make for such purposes is authorized on the condition that you reproduce MITRE’s copyright designation and this license in any such copy. CWE is a trademark of The MITRE Corporation. Please contact cwe@mitre.org if you require further clarification on this issue.

DISCLAIMERS

By accessing information through this site you (as “the user”) hereby agrees the site and the information is provided on an “as is” basis only without warranty of any kind, express or implied, including but not limited to implied warranties of merchantability, availability, accuracy, noninfringement, or fitness for a particular purpose. Use of this site and the information is at the user’s own risk. The user shall comply with all applicable laws, rules, and regulations, and the data source’s restrictions, when using the site.

By contributing information to this site you (as “the contributor”) hereby represents and warrants the contributor has obtained all necessary permissions from copyright holders and other third parties to allow the contributor to contribute, and this site to host and display, the information and any such contribution, hosting, and displaying will not violate any law, rule, or regulation. Additionally, the contributor hereby grants all users of such information a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such information and all derivative works.

The MITRE Corporation expressly disclaims any liability for any damages arising from the contributor’s contribution of such information, the user’s use of the site or such information, and The MITRE Corporation’s hosting the tool and displaying the information. The foregoing disclaimer specifically includes but is not limited to general, consequential, indirect, incidental, exemplary, or special or punitive damages (including but not limited to loss of income, program interruption, loss of information, or other pecuniary loss) arising out of use of this information, no matter the cause of action, even if The MITRE Corporation has been advised of the possibility of such damages.
Page Last Updated: July 20, 2023
 

Use of the Common Weakness Enumeration (CWE™) and the associated references from this website are subject to the Terms of Use. CWE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and managed by the Homeland Security Systems Engineering and Development Institute (HSSEDI) which is operated by The MITRE Corporation (MITRE). Copyright © 2006–2026, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.
 CAPEC - Terms of Use
Home > About CAPEC > Terms of Use  

Terms of Use

LICENSE

The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use Common Attack Pattern Enumeration and Classification (CAPEC™) for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE’s copyright designation and this license in any such copy.

DISCLAIMERS

ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN ARE PROVIDED ON AN "AS IS" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

More information is available — Please select a different filter.
Page Last Updated or Reviewed: April 04, 2019
 

Use of the Common Attack Pattern Enumeration and Classification (CAPEC), and the associated references from this website are subject to the Terms of Use. Copyright © 2007–2026, The MITRE Corporation. CAPEC and the CAPEC logo are trademarks of The MITRE Corporation.