Matching CDBSC-DST

URI: MP-CDBSC-DST

Description: Finds a process using a DB service and the associated service channel, plus the DB host and a copy of data served by the DB and flowing from it, but not to the process.

Root Pattern: R-CDBSCDSDA

R-CDBSCDSDA

Finds a process using a DB service to update data, where the data in this case may or may not normally be accessed via the process.

(empty)

DS.C.CDBSC-DST.4

Malicious query from Client via database Service leaks data Data : an attacker having the ability to send arbitrary queries to Service from or via Client injects a query to retrieve data Data. In this scenario, a selection query for Data would not be expected to come via Client, so the attack can be prevented using database access controls at Service.

Matching CDBSC-DST

R-CDBSCDSDA

Construction Patterns (0)

Threat Patterns (1)

DS.C.CDBSC-DST.4