Matching LnSucP-pS

URI: MP-LnSucP-pS

Description: Finds a remote access service using a process to which it forwards credentials, where that process does not need those credentials to access another service.

Root Pattern: R-LnSucP

R-LnSucP

Finds a remote access service using a process to which it forwards credentials.

(empty)

P.E.LnSucP-pS.9

Remote access service LoginService cannot use and be controlled by Process: this arrangement normally implies that a client is using forwarded credentials to access a service. Since LoginService runs Process as a shell command, this makes no sense, unless Process needs credentials from the remote client of LoginService to access some other service. However, in this case there is no such other service.

Matching LnSucP-pS

R-LnSucP

Construction Patterns (0)

Threat Patterns (1)

P.E.LnSucP-pS.9