Umbra Wiki weakness weakness/CWE-1094
Back to wiki

CWE-1094 — Excessive Index Range Scan for a Data Resource

provenance: imported · CWE: CWE-1094

CWE-1094: Excessive Index Range Scan for a Data Resource

MITRE CWE weakness

Kind Weakness
Abstraction Base
Status Incomplete
Likelihood of exploit

Description

The product contains an index range scan for a large data table, but the scan can cover a large number of rows.

While the interpretation of "large data table" and "excessive index range" may vary for each product or developer, CISQ recommends a threshold of 1000000 table rows and a threshold of 10 for the index range.

Common consequences

  • Other: Reduce Performance

Mitigations

(none listed)

References

  • CWE page: https://cwe.mitre.org/data/definitions/1094.html
  • CWE list: https://cwe.mitre.org/data/index.html