Matching CCCSCCS-i

URI: MP-CCCSCCS-i

Description: Finds a client accessing a service that uses another service, via the associated client channels, where indirect access by the client is not authenticated by the second service.

Root Pattern: R-CCCSCCS

R-CCCSCCS

Finds a client accessing a service that uses another service, via the associated client channels.

(empty)

CC.AuD.CCCSCCS-i.3

Confused deputy as Client via Service: if service Service has access to a back-end service Process that is not normally available to Client, an untrustworthy client may send a malicious request to Service that to gain inappropriate access to Process.

Matching CCCSCCS-i

R-CCCSCCS

Construction Patterns (0)

Threat Patterns (1)

CC.AuD.CCCSCCS-i.3