CWE-420: Unprotected Alternate Channel
Description
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.
- Abstraction
- BaseA weakness specific enough to point to detection and prevention methods.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- Access Control
Gain Privileges or Assume Identity; Bypass Protection Mechanism
Potential mitigations
- Architecture and Design
Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.
Related weaknesses
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.