Matching CACHLSS

URI: MP-CACHLSS

Description: Finds a service that is not acting as a reverse proxy accessed by a client and an associated context for access from the client via a subnet to which it need not normally be connected, plus the two process hosts and optionally the client user and service manager.

Root Pattern: R-CACHLSS

R-CACHLSS

Finds a service accessed by a client via a subnet the client need not normally be on, and an associated context for access to the client.

(empty)

CC.AuC.CACHLSS.2

Client Client on stolen host CHost used to access Service via LogicalSubnet: if an attacker in possession of stolen device CHost can control the installed client Client when CHost is connected to LogicalSubnet, the attacker can use Client to access Service using a privileged network path, thus acting as a false (impersonated) client.

Matching CACHLSS

R-CACHLSS

Construction Patterns (0)

Threat Patterns (1)

CC.AuC.CACHLSS.2