Skip to main content

Database / Warehouse

Threats

Version:

ID	Title	Description	External Mappings	Capability Mappings	Control Mappings
CCC.DataWar.TH01	Unauthorized Public Access to Datasets	Datasets may be unintentionally made publicly accessible, either at the dataset level or via IAM policies, allowing unauthorized users to read or modify sensitive data, leading to data breaches and compliance violations.	1	1	0
CCC.DataWar.TH02	Data Exfiltration via Unauthorized Views	Attackers may create or exploit unauthorized views to access sensitive data without proper permissions, leading to data leakage.	1	1	0
CCC.DataWar.TH03	Exposure of Sensitive Data through Inadequate Column-Level Security	Lack of proper column-level security can lead to unauthorized users accessing sensitive data fields, resulting in data breaches.	1	1	0

Imports

ID	Remarks
CCC.Core.TH01	Access is Granted to Unauthorized Users
CCC.Core.TH02	Data is Intercepted in Transit
CCC.Core.TH03	Deployment Region Network is Untrusted
CCC.Core.TH04	Data is Replicated to Untrusted or External Locations
CCC.Core.TH05	Interference with Replication Processes
CCC.Core.TH06	Data is Lost or Corrupted
CCC.Core.TH07	Logs are Tampered With or Deleted
CCC.Core.TH08	Runtime Metrics are Manipulated
CCC.Core.TH09	Runtime Logs are Read by Unauthorized Entities
CCC.Core.TH10	State-change Events are Read by Unauthorized Entities
CCC.Core.TH11	Publications are Incorrectly Triggered
CCC.Core.TH12	Resource Constraints are Exhausted
CCC.Core.TH13	Resource Tags are Manipulated
CCC.Core.TH14	Older Resource Versions are Used
CCC.Core.TH15	Automated Enumeration and Reconnaissance by Non-human Entities