CWE•Base•Draft•2 recent CVEs
CWE-419Unprotected Primary Channel
Description
The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.
Common consequences
- Access Control→Gain Privileges or Assume Identity,Bypass Protection Mechanism
Potential mitigations
- Architecture and DesignDo not expose administrative functionnality on the user UI.
- Architecture and DesignProtect the administrative/restricted functionality with a strong authentication mechanism.