CWE-420
Unprotected Alternate Channel
About
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.
Common consequences
- Access Control → Gain Privileges or Assume Identity, Bypass Protection Mechanism
Mitigations
- Architecture and Design: Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.
CVEs with this weakness
Frequently asked questions
What is CWE-420?
The product protects a primary channel, but it does not use the same level of protection for an alternate channel. Common consequences Access Control → Gain Privileges or Assume Identity, Bypass Protection Mechanism Mitigations Architecture and Design: Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.
How many CVEs does Rainforest track for CWE-420?
Rainforest Labs currently tracks 1 published CVEs mapped to CWE-420. They are listed on this page.
Empower Your Security Strategy with Rainforest
Discover vulnerabilities early, prioritize critical threats, and protect what truly matters. Rainforest streamlines your security operations, saving you time and reducing costs, so you can focus on what drives your business forward.