CWE-408—Incorrect Behavior Order: Early Amplification

名称

Incorrect Behavior Order: Early Amplification

描述

The product allows an entity to perform a legitimate but expensive operation before authentication or authorization has taken place.

常见后果

范围：

Availability

影响：

DoS: Amplification, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)

注释：

System resources, CPU and memory, can be quickly consumed. This can lead to poor system performance or system crash.

相关 CWE

• CWE-405Asymmetric Resource Consumption (Amplification)
• CWE-696Incorrect Behavior Order