Guest User Abuse

Type: technique

Description: The adversary could exploit misconfigurations related to guest user permissions in order to interact with the AI system. The platforms on which these AI systems reside typically aim to provide guest accounts with restricted access for specific tasks. However, if guest access is misconfigured, it could unintentionally grant more extensive permissions than originally intended - including privileges for AI systems interaction.

Version: 0.1.0

Created At: 2024-12-31 14:18:56 -0500

Last Modified At: 2024-12-31 14:18:56 -0500

External References

  • --> Initial Access (tactic): An adversary could leverage a guest user account as a foothold into the target environment.