CWE-408

Incorrect Behavior Order: Early Amplification
AI Translation Available

The product allows an entity to perform a legitimate but expensive operation before authentication or authorization has taken place.

Status
draft
Abstraction
base

Common Consequences

availability
Impacts
dos: amplification dos: crash, exit, or restart dos: resource consumption (cpu) dos: resource consumption (memory)

Potential Mitigations