CAPEC-12 : Choosing Message Identifier
This pattern of attack is defined by the selection of messages distributed via multicast or public information channels that are intended for another client by determining the parameter value assigned to that client. This attack allows the adversary to gain access to potentially privileged information, and to possibly perpetrate other attacks through the distribution means by impersonation. If the channel/message being manipulated is an input rather than output mechanism for the system, (such as a command bus), this style of attack could be used to change the adversary's identifier to more a privileged one.
https://capec.mitre.org/data/definitions/12.htmlRelated CWE definitions
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Please note that CAPEC definitions are provided as a quick reference only.
Visit http://capec.mitre.org/ for a complete list of CAPEC entries
and more information.