Data Resource Access without Use of Connection Pooling

Incomplete Base
Structure: Simple
Description

The product accesses a data resource through a database without using a connection pooling capability.

Extended Description

This issue can make the product perform more slowly, as connection pools allow connections to be reused without the overhead and time consumption of opening and closing a new connection. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.

Common Consequences 1
Scope: Other

Impact: Reduce Performance

References 2
Automated Source Code Performance Efficiency Measure (ASCPEM)
Object Management Group (OMG)
01-2016
ID: REF-959
Connection pool
Wikipedia
ID: REF-974
Taxonomy Mapping
  • OMG ASCPEM