Matching CCCSCCSDF-Vi

URI: MP-CCCSCCSDF-Vi

Package: ProcessComms

< prev | next >

Description: Finds a client accessing a service that uses another service, via the associated client channels, where indirect access by the client is not authenticated by the second service, plus a data flow not encrypted with keys from a vault, that flows to the second service from the first but not to the client.

Root Pattern: R-CCCSCCSDF

R-CCCSCCSDF

Finds a client accessing a service that uses another service, via the associated client channels, plus a data flow from the second service to the first.

Threat Patterns (1)

DF.C.CCCSCCSDF-Vi.3

Flow of data from/via Process leaked to compromised client Client via confused deputy Service: if service Service does not send data Data to its client Client , it is still possible for the client to request the data flow using a confused deputy attack against Service. The attack itself is responsible for the upstream loss of DeputyUserTW (see threat causes).