CAPEC-546 Incomplete Data Deletion in a Multi-Tenant Environment
Abstraktion: detailedStatus: activeAn adversary obtains unauthorized information due to insecure or incomplete data deletion in a multi-tenant environment. If a cloud provider fails to completely delete storage and data from former cloud tenants' systems/resources, once these resources are allocated to new, potentially malicious tenants, the latter can probe the provided resources for sensitive information still there.
Wahrscheinlichkeit: LowSchweregrad: Medium
01
Schwächen (3)
Die CWE-Schwächeklassen, zu denen dies gehört.
02
verwandte Angriffsmuster (1)
Verwandte Einträge.
03
Quelle
Wo diese Definition veröffentlicht ist.