COMMON WEAKNESS ENUMERATIONIncomplete

CWE-1072

Data Resource Access without Use of Connection Pooling

The product accesses a data resource through a database without using a connection pooling capability.

Abstraction

Base

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The product accesses a data resource through a database without using a connection pooling capability.

Root cause

How and when does the problem arise?

Lifecycle phase

Implementation

Lifecycle phase

Architecture and Design

Risk

What does successful exploitation lead to?

Reduce Performance

Affected security scopes: Other

This issue can make the product perform more slowly, as connection pools allow connections to be reused without the overhead and time consumption of opening and closing a new connection. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.

Defence

How is it prevented and fixed?

  • Follow secure coding guidelines for input handling and boundary checking.
  • Enforce strict security reviews and automated static analysis (SAST) checks.