CWE-420

Unprotected Alternate Channel

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Mitigation

Phase: Architecture and Design

Description:

  • Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.

No CAPEC attack patterns related to this CWE.

Back to CWE stats page