Insecure service configuration - Object Reutilization
Description
The system does not validate that objects, data or information, valid for one use only can be reused.
Impact
Abuse functionalities that should be accessed once.
Recommendation
Implement validations to guarantee that One-Time data. cannot be reused.
Threat
Anonymous attacker from the Internet.
Expected Remediation Time
⏱️ 90 minutes.
Requirements
030 - Avoid object reutilizationScore
Default score using CVSS 4.0. It may change depending on the context of the src.
Base 4.0
Attack vector
N
Attack complexity
L
Attack requirements
N
Privileges required
N
User interaction
N
Confidentiality (VC)
N
Integrity (VI)
L
Availability (VA)
N
Confidentiality (SC)
N
Integrity (SI)
N
Availability (SA)
N
Threat 4.0
Exploit maturity
A
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:A