{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"cyber_security","domain":["Network & Communications Security","Data Protection & Privacy","Secure Configuration & Change Management"],"inherent_rating":"medium","taxonomy":["nist-800-30-threat-event"]},"canonicalUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-cloud-multitenancy-exploit","description":"Adversary exploits multi-tenancy in a cloud environment to observe organizational processes, violates isolation mechanisms, or scavenges data used and deleted by cloud processes, compromising confidentiality and availability.","details":{"category":"cyber_security","impact":"high","inherent_rating":"medium","likelihood":"low","risk_id":"net-cloud-multitenancy-exploit","taxonomies":["nist-800-30-threat-event"],"treatment":"mitigate"},"id":"risk:net-cloud-multitenancy-exploit","mapUrl":"https://controlsmap.com/?v=1&node=risk%3Anet-cloud-multitenancy-exploit","sourceIds":["iso-27001","nist-800-53","nist-csf-2","pci-dss","soc2"],"sourceUrl":null,"title":"Cloud multi-tenancy isolation and data-scavenging exploits","type":"risk"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:2068651eb4af6f3210907fb19d21974a3d5a77019903be16cb9e1765ba58ed2c","properties":{"rationale":"Partitioning components of differing sensitivity into separate domains reinforces the isolation a multi-tenancy exploit tries to violate.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-net-04-d99d6d16.json","sourceId":"uc:UC-NET-04","targetDetailPath":"/data/v1/records/risk-net-cloud-multitenancy-exploit-d98521d5.json","targetId":"risk:net-cloud-multitenancy-exploit","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:6a24f23e8acebe7776fdb50904e3090f1114a1b3ea4e284289c28280fea24fbe","properties":{"rationale":"Clearing/sanitizing/isolating shared resources between users and processes directly prevents scavenging of data remnants used and deleted by cloud processes.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-net-05-b8a440f7.json","sourceId":"uc:UC-NET-05","targetDetailPath":"/data/v1/records/risk-net-cloud-multitenancy-exploit-d98521d5.json","targetId":"risk:net-cloud-multitenancy-exploit","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:fc5893a398befb9e8398d5b226f2e2a3c6b6847c478d429db61ecc678d2acf00","properties":{"rationale":"Enforcing secure configuration baselines reduces the cloud/IAM misconfigurations that break tenant isolation, though platform isolation is the operative defense.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-config-01-8f911a32.json","sourceId":"uc:UC-CONFIG-01","targetDetailPath":"/data/v1/records/risk-net-cloud-multitenancy-exploit-d98521d5.json","targetId":"risk:net-cloud-multitenancy-exploit","type":"mitigates"}],"schemaVersion":1}