Threat SC.IS.SCpSg.8.1

URI: SC.IS.SCpSg.8.1

Package: ProcessComms

< prev | next >

Description: Privileged channel between Client and Service in service: if access to Service from LogicalSubnet is enabled despite any default firewall rules, then the network path from Client is open and could potentially be exploited in other threats.

Threat Type: Primary Threat

Matching Pattern:

SC.IS.SCpSg.8.1
MP-SCpSg

Finds a Service Channel that traverses no logical segments, plus its Client and Service, and network interfaces.

        (empty)

        (empty)

CSG-DisableServiceChannel

Firewall rules that normally allow access to service Service by clients on otherwise blocked network paths are switched off. This strategy represents a permanent restriction introduced by design or in accordance with an operational policy or user preference to avoid accessing Service over certain networks. It may also arise as a side effect of a run-time response to a more specific threat. In either case, it triggers threats representing side effects that would be caused by such a restriction where they affect all available network paths used by a client.