Matching SPNaS

URI: MP-SPNaS

Package: ProcessComms

< prev | next >

Description: Finds a host running a service accessed via a reverse proxy, plus the associated client channel, contexts in which the service can be accessed, and optionally the managers of the client proxy, service and service host.

Root Pattern: R-SPNaS

R-SPNaS

Finds a host running a service accessed by a reverse proxy, plus the associated client channel.

Threat Patterns (2)

P.L.SPNaS.3

Remote control of process Service using a back door via proxy Client: a malicious user or an attacker who can send messages via reverse proxy Client to a back-end service Service could access a back door if previously installed in the software, and gain control of Service including its access to its rights on device SHost.

P.V.SPNaS.2

Remote authenticated exploit on service Service via reverse proxy Client: a malicious user or attacker able send messages to Service via reverse proxy Client can send a malicious request that can exploit a bug in Service after authentication.