1. Home
  2. Weaknesses
  3. CWE-408

CWE-408: Incorrect Behavior Order: Early Amplification

ID CWE-408
Abstraction Base
Structure Simple
Status Draft
Number of CVEs 2
Detail Dashboard Vulnerabilities Web & Social
The product allows an entity to perform a legitimate but expensive operation before authentication or authorization has taken place.

Modes of Introduction

Phase Note
Architecture and Design
Implementation

Applicable Platforms

Type Class Name Prevalence
Language Not Language-Specific

Relationships

View Weakness
# ID View Status # ID Name Abstraction Structure Status
CWE-1000 Research Concepts Draft CWE-405 Asymmetric Resource Consumption (Amplification) Class Simple Incomplete
CWE-1000 Research Concepts Draft CWE-696 Incorrect Behavior Order Class Simple Incomplete

CVEs Published

Based on CVE published date

CVSS Severity

CVSS Severity - By Year

CVSS Base Score

# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date