CCC.Core.TH17: Responses are Generated for Unauthorized Requests
Threat ID:CCC.Core.TH17
Title:Responses are Generated for Unauthorized Requests
Description:
The service may generate responses to requests from unauthorized entities. This could lead to the exposure of system details, which may be used to plan an attack against the service, system, or network. Additionally, allocating resources to service the request could lead to a denial of service for legitimate users, leading to a loss of availability anywhere in the system.
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Core.CP29 | Active Ingestion | While running, the service can receive inputs, commands, or data streams from external sources such as dedicated APIs, exposed network ports, message queues, and persistent data ingestion channels. |
External Mappings
| Reference ID | Entry ID | Strength | Remarks |
|---|---|---|---|
CCMv4 | IVS-09 | 1 | Network Defense (techniques for protection, detection, and timely response) |