CWE-424—Improper Protection of Alternate Path

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID：
CWE-424
摘要：
Class
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Improper Protection of Alternate Path

描述

The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.

常见后果

范围：
Access Control
影响：
Bypass Protection Mechanism, Gain Privileges or Assume Identity

相关 CWE

browse all CWEs