forked from aquasecurity/vuln-list
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCWE-1072.json
26 lines (26 loc) · 810 Bytes
/
CWE-1072.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
{
"ID": 1072,
"Name": "Data Resource Access without Use of Connection Pooling",
"Description": "The product accesses a data resource through a database without using a\n\t\t\t\t\tconnection pooling capability.",
"PotentialMitigations": {
"Mitigation": null
},
"RelatedAttackPatterns": {
"RelatedAttackPattern": null
},
"CommonConsequences": {
"Consequence": [
{
"Scope": [
"Other"
],
"Impact": [
"Reduce Performance"
]
}
]
},
"ExtendedDescription": [
"This issue can make the product perform more slowly, as connection pools allow connections to be reused without the overhead and time consumption of opening and closing a new connection. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability."
]
}