An attack against an authentication protocol in which the attacker either assumes the role of a claimant with a genuine verifier or actively alters the authentication channel.
Sources:
NIST SP 800-63-4
[
NIST SP 800-63A-4
[