Write permission on a secret may be granted more broadly than read permission, or may be obtained through a compromised identity, allowing a new version to be stored with a value chosen by the writer. External systems that consume the secret then authenticate with the substituted credential or connect to an endpoint named in it, redirecting data to an unintended destination or failing to authenticate. The integrity of the credential and the availability of the systems that depend on it are affected.
Secret Values are Replaced by Unauthorized Entities
CCC.SecMgmt.TH02
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.SecMgmt.CP05 | Update Secrets | The service can update the value or metadata of an existing secret after creation, and automatically stores an updated value as a new version of that secret. |
| CCC.Core.CP06 | Access Control | The service automatically enforces user configurations to restrict or allow access to a specific component or a child resource based on factors such as user identities, roles, groups, or attributes. |
| CCC.Core.CP18 | Resource Versioning | The service automatically assigns versions to child resources which can be used to preserve, retrieve, and restore past iterations. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.SecMgmt.CN03 | Enforce Least-Privilege Access to Secret Values | Ensure that only the identities that consume a secret can read its value, and that an identity which only consumes a secret cannot replace its value. |