CAPEC-546 Incomplete Data Deletion in a Multi-Tenant Environment

abstraction: detailedstatus: active

An adversary obtains unauthorized information due to insecure or incomplete data deletion in a multi-tenant environment. If a cloud provider fails to completely delete storage and data from former cloud tenants' systems/resources, once these resources are allocated to new, potentially malicious tenants, the latter can probe the provided resources for sensitive information still there.

likelihood: Lowseverity: Medium
01

weaknesses (3)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.