Matching CDBSC

URI: MP-CDBSC

Description: Finds a process acting as a client to a DB with a Client Channel between them, and optionally the process host manager.

Root Pattern: R-CDBSC

R-CDBSC

Finds a process acting as a client to a DB in a context where the connection between them is open.

(empty)

CC.R.CDBSC.4

Query injection at Service into back end DB: an attacker having exploited a bug in Service when connected to DB, is able to send arbitrary queries to DB. This is modelled as an adverse behaviour in the inferred client channel representing their trust relationship, fulfilling the precondition for further threats using injected queries to access or alter data stored by DB.

Matching CDBSC

R-CDBSC

Construction Patterns (0)

Threat Patterns (1)

CC.R.CDBSC.4