Multi-Tenant Isolation Failure
多租戶隔離失效
Deployment
Risk Description
When query results for one tenant on a platform include fragments of another tenant's data; due to unmitigated control gaps, although the platform patches the issue quickly, it cannot determine how much data was exposed across tenants previously, and all tenants demand explanation and compensation, triggering compliance exposure and operational reputational costs.
Framework Mappings
NIST CSF 2.0PR.AA、PR.IR
ISO/IEC 27001Annex A 8.22
MITRE ATLASAML.T0024
NIST AI 600-1Data Privacy
ISO/IEC 5338部署
Risk Treatment & Implementation Guidance
Harden multi-tenant isolation, enforcing tenant boundaries at both data and context layers; Offer dedicated-resource options for highly sensitive tenants; Continuously verify isolation with cross-tenant testing and retain full access logs for after-the-fact scoping