Control Strategy ClientPasswordAccess

URI: CSG-ClientPasswordAccess

Description: Access to a service Service requires a password, which is stored by the client process Client on its host CHost.

(empty)

CC.AX.CCC-nS.6.1.1

Client Client unable to authenticate via password with Service: the service Service requires that clients authenticate using a password, but this is not available to client Client.

CC.AX.HuCCC-nS.6.1.2

User Human of client Client forgot the password to authenticate with Service: the service Service requires that clients authenticate using a strong password, but the user Human cannot remember the password.

CC.AuC.CCC-nS.3.2

Password from client Client captured by imposter of service Service: if an attacker can successfully spoof service Service to client Client, they can capture the password (or other reusable secret) used by Client to access the real service, allowing them to also impersonate the client.

CC.AuC.CCC-nS.3.3

Password snooped between Client and Service: if a communication path used by client Client at service Service is subject to snooping, and the client uses a password (or other reusable secret) to authenticate to the service, the password can be snooped, allowing impersonation of Client to Service.

CC.AuC.HumCCC-nS.3

Credential stuffing to find password used by Human to access Service from Client: this threat applies where a human user of client Client uses a weak password which can guessed or found by brute force attack and used by an attacker to access Service as the client.

Password at Role_Client

PasswordVerifier at Role_Service

Control Strategy ClientPasswordAccess

Mitigated Threats (0)

Blocked Threats (2)

CC.AX.CCC-nS.6.1.1

CC.AX.HuCCC-nS.6.1.2

Triggers Threats (3)

CC.AuC.CCC-nS.3.2

CC.AuC.CCC-nS.3.3

CC.AuC.HumCCC-nS.3

Control Sets (2)