CWE-420Unprotected Alternate Channel

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID:
CWE-420
摘要:
Base
结构:
Simple
状态:
Draft
发布日期:
2006-07-19
更新日期:
2025-12-11

名称

Unprotected Alternate Channel

描述

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

常见后果

范围:
Access Control
影响:
Gain Privileges or Assume Identity, Bypass Protection Mechanism

相关 CWE