Matching CCCvsCC-nS

URI: MP-CCCvsCC-nS

Package: ProcessComms

< prev | next >

Description: Finds a Client accessing a Service via intermediaries, where the Service is responsible for client authentication, along with the Client Channel between the Client and Service, and the related channels via intermediaries, any of which can cause a threat, plus the client and service hosts and and optionally the service manager and interactive client user.

Root Pattern: R-CCCS

R-CCCS

Finds a Client and Service with a Client Channel between them, plus their hosts.

Threat Patterns (1)

CC.AuC.CCCvsCC-nS.1

Unauthenticated access as client Client to service Service: if an attacker has network access between Client or Service and any intermediaries through which they communicate, they can inject a connection request through to service Service, and if not authenticated, impersonate Client.