Matching CCCSPCCSDF-Vi

URI: MP-CCCSPCCSDF-Vi

Description: Finds a client accessing a proxy that (directly or indirectly) uses a service that uses a second service, where the client is not authenticated by the second service, with a data flow not encrypted with keys from a vault going from the second service to the first but not to the client, plus the associated client channels.

Root Pattern: R-CCCSPCCSDF

R-CCCSPCCSDF

Finds a client accessing a proxy that (directly or indirectly) uses a service that uses a second service, with a data flow from the second service to the first, plus the associated client channels.

(empty)

DF.C.CCCSPCCSDF-Vi.3

Flow of data from/via Process leaked to compromised client Client via confused deputy Proxy: if client Client is compromised or impersonated, and does not receive data Data from its service Proxy, it is still possible to get the data indirectly using a confused deputy attack via Proxy and Service. The attack itself is responsible for the upstream loss of DeputyUserTW (see threat causes), in this case propagated by at least one reverse proxy.

Matching CCCSPCCSDF-Vi

R-CCCSPCCSDF

Construction Patterns (0)

Threat Patterns (1)

DF.C.CCCSPCCSDF-Vi.3