Overly Broad Trust Relationships
Overview
Overly broad trust relationships occur when systems, users, or domains are granted excessive or unnecessary trust, allowing access beyond what is required for legitimate operations. This weakness arises from misconfigured permissions, poorly defined access controls, or blanket trust policies that fail to enforce the principle of least privilege.
Why It Matters
- Security impact: It increases the attack surface by enabling unauthorized access and lateral movement within networks.
- Business risk: It can lead to data breaches, intellectual property theft, and disruption of critical business functions.
- Common consequences: Compromise of sensitive information, privilege escalation, and propagation of malware or ransomware.
Where It Appears
- Environments: Enterprise networks, cloud infrastructures, and interconnected organizational domains.
- Systems or processes: Identity and access management systems, domain trusts, and shared service accounts.
- Typical conditions: Default or inherited trust settings, lack of segmentation, and inadequate review of access permissions.
How It Is Exploited (High Level)
Attackers exploit overly broad trust relationships by leveraging excessive permissions or trust paths to move laterally across systems, escalate privileges, and access sensitive resources that would otherwise be restricted.
How It Is Addressed (High Level)
Mitigation involves implementing strict access controls, applying the principle of least privilege, regularly auditing trust relationships, and segmenting networks to limit the scope of trust and reduce potential attack vectors.
Related Topics
Least privilege, lateral movement, privilege escalation, identity and access management, network segmentation, trust boundaries.