CWE-419: Unprotected Primary Channel
The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.
A kind of CWE-923 Improper Restriction of Communication Channel to Intended Endpoints.
From the CWE List. © The MITRE Corporation.
Newest
- hclsoftware bigfix ivr, hcltech bigfix insights for vulnerability remediation +1 more HCL BigFix IVR is impacted by an improper service binding configuration 2.2 Low
- envoyproxy gateway Envoy Admin Interface Exposed through prometheus metrics endpoint 7.1 High
- hasomed elefant Unprotected Exposed Firebird Database with default credentials 9.8 Critical
- dream train internet inc. tone store app TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel.... 3.7 Low
- silabs z\/ip gateway sdk, silabs.com z/ip gateway sdk +1 more Z/IP Gateway Device Reset Locally Denial of Service Vulnerability 7.5 High
- movistar es wld71-t1 firmware, router movistar 4g +1 more Unprotected Primary Channel vulnerability in Movistar 4G router 8.8 High
- silabs.com pc controller, silabs z-wave pc-based controller +1 more Silicon Labs PC Controller Denial of Service Vulnerability 6.5 Medium
- triton project triton Spigot Command Exploit in Triton 7.2 High
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0... 5.3 Medium
- kubernetes Kubernetes kubelet exposes /debug/pprof info on healthz port 6.5 Medium
- node.js Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by... 8.1 High
- eclipse openj9, the eclipse foundation eclipse openj9, oracle enterprise manager base platform +2 more In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach... 7.8 High