Consider the following Python code snippet used in a Splunk add-on:if not os.

Splunk SPLK-2001 Question Answer

Consider the following Python code snippet used in a Splunk add-on:

if not os.path.exists(full_path): self.doAction(full_path, header) else: f = open (full_path) oldORnew = f.readline().split(“,”) f.close()

An attacker could create a denial of service by causing an error in either the open() or readline()

commands. What type of vulnerability is this?

CWE-693: Protection Mechanism Failure

CWE-562: Return of Stack Variable Address

CWE-404: Improper Resource Shutdown or Release

CWE-636: Not Failing Securely (‘Failing Open’)

SPLK-2001 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"