Logging of Excessive Data
Variants:
Direct
Vector Type:
Attack
Relevance:
Generic
Layer:
Application-Level
Platforms:
Any
Target Type:
Application
Affected Mechanisms:
Secure Design
Invented In:
10/11/2002
Added In:
21/12/2014
Vector Operation Method:
The logging feature can be abused by attackers to intentionally flood the logs and make tracing potential attacks much harder.
