Threat CC.AuA.CCAPNaS.1

URI: CC.AuA.CCAPNaS.1

Package: ProcessComms

< prev | next >

Description: Network access to service Service as Client from LogicalSubnet: an attacker with access to subnet LogicalSubnet can send messages to service Service, exploiting a privileged network path through firewalls used by client Client. This allows anonymous access to vulnerabilities or backdoors in Service.

Threat Type: Primary Threat

Matching Pattern:

MP-CCAPNaS

Finds a service and its host accessed by a client via the associated client channel on a closed client attack path from a logical subnet where messages from the attacker come from the same address as those from the client, plus all the associated service process contexts, and optionally the client user and the service and service host managers.