Matching CCCPCCS-i

URI: MP-CCCPCCS-i

Package: ProcessComms

< prev | next >

Description: Finds a client accessing a reverse proxy that uses a service, via the associated client channels, where the client and service are not in a credential forwarding chain, plus optionally the reverse proxy manager.

Root Pattern: R-CCCPCCS

R-CCCPCCS

Finds a client accessing a reverse proxy that uses a service, via the associated client channels.

Threat Patterns (2)

CC.AuD.CCCPCCS-i.3

Confused deputy Client access to Process via Service: if client Client has accepted an inappropriate request from its client to gain access to back-end service Process, and Client has access to Process via reverse proxy Service, then Service will forward the request making it a confused deputy.

CC.AuP.CCCPCCS-i.3

Access by Client to Process via reverse proxy Service: if client Client has access to service Process via reverse proxy Service, and Client is an untrustworthy client (due to impersonation or compromise), then so (in a more limited sense) is Service.