Weakness (CWE)
CWE-410: Insufficient Resource Pool
The product's resource pool is not large enough to handle peak demand.
How to prevent it (5 mitigations)
-
Architecture and Design
Do not perform resource-intensive transactions for unauthenticated users and/or invalid requests.
-
Architecture and Design
Consider implementing a velocity check mechanism which would detect abusive behavior.
-
Operation
Consider load balancing as an option to handle heavy loads.
-
Implementation
Make sure that resource handles are properly closed when no longer needed.
-
Architecture and Design
Identify the system's resource intensive operations and consider protecting them from abuse (e.g. malicious automated script which runs the resources out).
Source: MITRE CWE-410
2 results · Clear filters · Feed
-
Low 3.7
Insufficient Resource Pool in hMailServer
Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certificate issuance or renewal to fail. When the server obtains or renews a TLS certif…
-
Low 3.5
IBM Jazz Reporting Service Denial of Service
IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling.