Matching OCAPNaS

URI: MP-OCAPNaS

Package: ProcessComms

< prev | next >

Description: Finds a service and its host accessed by a client via the associated client channel on an open client attack path from a logical subnet where messages from the attacker can be distinguished from those from the client, plus all the associated service process contexts and interfaces from which client messages come, and optionally the client user and the service and service host managers.

Root Pattern: R-OCAPNoS

R-OCAPNoS

Finds a service and its host accessed by a client via the associated client channel on an open client attack path from a logical subnet where messages from the attacker can be distinguished from those from the client.

Threat Patterns (1)

CC.AuA.OCAPNaS.1

Network access to service Service as Client from LogicalSubnet: an attacker with access to subnet LogicalSubnet can send messages to service Service, exploiting a privileged network path through firewalls used by client Client. This allows anonymous access to vulnerabilities or backdoors in Service.