CWE-799
Improper Control of Interaction Frequency
2010-02-16
00h00 +00:00
00h00 +00:00
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
이름: Improper Control of Interaction Frequency
The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.
일반 정보
취약점 도입 방식
Architecture and DesignImplementation
Operation
적용 가능한 플랫폼
언어
클래스: Not Language-Specific (Undetermined)기술
클래스: Not Technology-Specific (Undetermined)클래스: Web Based (Undetermined)
이름: Web Server (Undetermined)
일반적인 결과
| 범위 | 영향 | 가능성 |
|---|---|---|
| Availability Access Control Other | DoS: Resource Consumption (Other), Bypass Protection Mechanism, Varies by Context 참고: This can allow the actor to perform actions more frequently than expected. The actor could be a human or an automated process such as a virus or bot. The consequences vary based on the intended logic of the code. For example, humans might be able to vote multiple times in a poll, or to perform password-guessing attacks without any rate limits. |
관찰된 예시
| 참고 자료 | 설명 |
|---|---|
CVE-2024-50653 | Chain: e-commerce product has a "front-end restriction" for coupon use (CWE-602), but the server does not restrict the number of requests for the same coupon (CWE-799) |
CVE-2002-1876 | Mail server allows attackers to prevent other users from accessing mail by sending a large number of rapid requests. |
취약점 매핑 메모
근거 : This CWE entry is a Class and might have Base-level children that would be more appropriate댓글 : Examine children of this entry to see if there is a better fit
참고 자료
REF-731
Insufficient Anti-automationWeb Application Security Consortium.
http://projects.webappsec.org/Insufficient+Anti-automation
제출
| 이름 | 조직 | 날짜 | 출시일 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 1.8 |
수정 사항
| 이름 | 조직 | 날짜 | 댓글 |
|---|---|---|---|
| CWE Content Team | MITRE | updated Demonstrative_Examples | |
| CWE Content Team | MITRE | updated Observed_Examples, Relationships | |
| CWE Content Team | MITRE | updated Common_Consequences | |
| CWE Content Team | MITRE | updated Demonstrative_Examples | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Observed_Examples, Relationships | |
| CWE Content Team | MITRE | updated Alternate_Terms, Common_Consequences, Description, Observed_Examples |
