CVE-2022-21155

Updated contingency plans include current procedures to detect, contain, and recover from resource exhaustion, limiting an attacker's ability to sustain impact from uncontrolled consumption.

MTTF monitoring plus ready substitutes directly mitigate sustained resource exhaustion by allowing component swap before or at failure.

Limiting concurrent sessions directly prevents uncontrolled resource consumption by capping the number of active sessions per user or account.

Provides defined handling (alert and additional actions) for the exceptional condition of audit logging failure.

Analysis identifies uncontrolled resource consumption indicative of denial-of-service or abuse attempts.

Supplies a concrete handling action (safe mode) for exceptional conditions, mitigating risks from improper or absent handling that could allow continued attacks.

By preparing users for contingency scenarios, the control promotes proper handling of exceptional conditions instead of default or unsafe behaviors.

Contingency plan testing includes resource exhaustion scenarios to verify recovery, making it harder for attackers to sustain exploits that cause uncontrolled consumption.