Threat P.E.Pu-pPucmS.9

URI: P.E.Pu-pPucmS.9

Package: ProcessComms

< prev | next >

Description: Process Client must forward credentials to service Process: process Client forwards credentials from its clients, leaving access control decisions to back-end services Service. It cannot also use service Process under its own credentials, unless as an authorization service. Each client must either forward credentials or operate using its own credentials. The knowledge base does not support a mixed-mode arrangement.

Threat Type: Primary Threat

Matching Pattern:

MP-Pu-pPucmS

Finds a client that forwards credentials to at least one service, and uses another process as a service without doing the same.