Matching CScP-v

URI: MP-CScP-v

Description: Finds a client directly or indirectly accessing a service which is controlled by another process, where the three processes are not in a credential forwarding or sharing chain and there is no link to say the cilent uses the third process for authentication.

Root Pattern: R-CScP

R-CScP

Finds a client directly or indirectly accessing a service which is controlled by another process.

CP-CScP-v+AA

Finds a client using a service, where the service is controlled by another process that is not itself used by the service, i.e. the process is an OIDC-style authenticator. Adds relationships specifying that the client is redirected to the authenticator by the service, and does not authenticate directly with the service.

(empty)

Matching CScP-v

R-CScP

Construction Patterns (1)

CP-CScP-v+AA

Threat Patterns (0)