Data Resource Access without Use of Connection Pooling

Opis

The product accesses a data resource through a database without using a connection pooling capability.

Skutki

• Other

  Reduce Performance

  This issue can make the product perform more slowly, as connection pools allow connections to be reused without the overhead and time consumption of opening and closing a new connection. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.

Słabość nadrzędna

• CWE-405 Asymmetric Resource Consumption (Amplification)

Kiedy powstaje

• Implementation
• Architecture and Design

Dotyczy

Not Language-Specific

Źródła

1. Automated Source Code Performance Efficiency Measure (ASCPEM) — Object Management Group (OMG), ASCPEM-PRF-13, 2016
2. Connection pool — Wikipedia