CWE-799
Improper Control of Interaction Frequency
2010-02-16
00h00 +00:00
00h00 +00:00
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
名前: Improper Control of Interaction Frequency
The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.
一般情報
導入モード
Architecture and DesignImplementation
Operation
適用可能なプラットフォーム
言語
クラス： Not Language-Specific (Undetermined)テクノロジー
クラス： Not Technology-Specific (Undetermined)クラス： Web Based (Undetermined)
名前： Web Server (Undetermined)
一般的な結果
| スコープ | 影響 | 可能性 |
|---|---|---|
| Availability Access Control Other | DoS: Resource Consumption (Other), Bypass Protection Mechanism, Varies by Context 注記：This can allow the actor to perform actions more frequently than expected. The actor could be a human or an automated process such as a virus or bot. The consequences vary based on the intended logic of the code. For example, humans might be able to vote multiple times in a poll, or to perform password-guessing attacks without any rate limits. |
観察された例
| 参考文献 | 説明 |
|---|---|
CVE-2024-50653 | Chain: e-commerce product has a "front-end restriction" for coupon use (CWE-602), but the server does not restrict the number of requests for the same coupon (CWE-799) |
CVE-2002-1876 | Mail server allows attackers to prevent other users from accessing mail by sending a large number of rapid requests. |
脆弱性マッピングノート
理由 : This CWE entry is a Class and might have Base-level children that would be more appropriateコメント : Examine children of this entry to see if there is a better fit
参考文献
REF-731
Insufficient Anti-automationWeb Application Security Consortium.
http://projects.webappsec.org/Insufficient+Anti-automation
登録情報
| 名前 | 組織 | 日付 | リリース日 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 1.8 |
変更履歴
| 名前 | 組織 | 日付 | コメント |
|---|---|---|---|
| CWE Content Team | MITRE | updated Demonstrative_Examples | |
| CWE Content Team | MITRE | updated Observed_Examples, Relationships | |
| CWE Content Team | MITRE | updated Common_Consequences | |
| CWE Content Team | MITRE | updated Demonstrative_Examples | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Observed_Examples, Relationships | |
| CWE Content Team | MITRE | updated Alternate_Terms, Common_Consequences, Description, Observed_Examples |
