CWE-420Unprotected Alternate Channel

Description

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Common consequences

• Access Control→Gain Privileges or Assume Identity,Bypass Protection Mechanism

Potential mitigations

• Architecture and Design
  Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.

Related CWEs

Recent CVEs classified under this CWE