COMMON WEAKNESS ENUMERATIONDraft

CWE-420

Unprotected Alternate Channel

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Architecture and Design

OMISSION: This weakness is caused by missing a security tactic during the architecture and design phase.

Yaşam döngüsü evresi

Implementation

Yaşam döngüsü evresi

Operation

Risk

Başarılı sömürü neye yol açar?

Gain Privileges or Assume IdentityBypass Protection Mechanism

Etkilenen güvenlik alanları: Access Control

Savunma

Nasıl önlenir ve çözülür?

Architecture and Design

Mimari ve tasarım yaklaşımı

Detay
Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.
CWE-420: Common Weakness Enumeration Entry CWE-420 · DayBreach Sözlük · DayBreach