CWE-408

BaseDraft

Incorrect Behavior Order: Early Amplification

The product allows an entity to perform a legitimate but expensive operation before authentication or authorization has taken place.

2 related weaknesses

Availability

DoS: Amplification

DoS: Crash, Exit, or Restart

DoS: Resource Consumption (CPU)

DoS: Resource Consumption (Memory)

System resources, CPU and memory, can be quickly consumed. This can lead to poor system performance or system crash.

Modes of Introduction

Architecture and Design

Implementation

Related Weaknesses

Example CVEs (1)

Tool creates directories before authenticating user.

External Links