Misbehaviour LossOfProxyUserTW

URI: LossOfProxyUserTW

Description: A malicious actor is able to send messages via a reverse proxy to a related service. The service is exposed to malicious requests, but not directly from an attacker.

This misbehaviour affects the trustworthiness attribute ProxyUserTW

ClientChannel

Represents a trust relationship between a Client and a Service. Exists where the two communicate directly, or where the Service may need to know the identity of the Client.

CC.AuP.CCCPCCS-i.3

Access by Client to Process via reverse proxy Service: if client Client has access to service Process via reverse proxy Service, and Client is an untrustworthy client (due to impersonation or compromise), then so (in a more limited sense) is Service.

CC.AuP.PCCPCCS-i.3

Access via Client to Process via reverse proxy Service: if client Client is a reverse proxy whose client is untrustworthy, then so (in a more limited sense) is Service.

(empty)

CC.AuD.CCCPCCS-i.3

Confused deputy Client access to Process via Service: if client Client has accepted an inappropriate request from its client to gain access to back-end service Process, and Client has access to Process via reverse proxy Service, then Service will forward the request making it a confused deputy.

CC.AuP.PCCPCCS-i.3

Access via Client to Process via reverse proxy Service: if client Client is a reverse proxy whose client is untrustworthy, then so (in a more limited sense) is Service.

P.L.SPNaLnS.1

Remote access to login service Service via reverse proxy Client: a malicious user or an attacker who can authenticate with reverse proxy Client can send messages via Client to a back-end login service Service, gaining access to its rights on device SHost.

P.L.SPNaS.3

Remote control of process Service using a back door via proxy Client: a malicious user or an attacker who can send messages via reverse proxy Client to a back-end service Service could access a back door if previously installed in the software, and gain control of Service including its access to its rights on device SHost.

P.V.SPNaS.2

Remote authenticated exploit on service Service via reverse proxy Client: a malicious user or attacker able send messages to Service via reverse proxy Client can send a malicious request that can exploit a bug in Service after authentication.

Misbehaviour LossOfProxyUserTW

Assets (1)

Threats that cause this misbehaviour (2)

CC.AuP.CCCPCCS-i.3

CC.AuP.PCCPCCS-i.3

Threats caused by this misbehaviour (0)

Threats caused by affected trustworthiness attribute (5)

CC.AuD.CCCPCCS-i.3

CC.AuP.PCCPCCS-i.3

P.L.SPNaLnS.1

P.L.SPNaS.3

P.V.SPNaS.2