CWE-602: Client-Side Enforcement of Server-Side Security
The product includes a server that relies on the client to implement a protection mechanism that is intended to protect the server.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm business automation workflowIBM Business Automation Workflow improper input validation4.9 Medium
- ivanti workspace control, automation +1 moreInsufficient server-side controls in the management console of Ivanti Workspace Control version...8.8 High
- cyberark identity management, identity +1 moreCyberArk - CWE-602: Client-Side Enforcement of Server-Side Security8.3 High
- honeywell pc42t, pc42tp, and pc42d (common firmware)Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site...3.5 Low
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1)....7.1 High
- fortinet fortiportalA client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6...4.1 Medium
- roxnor wp ultimate reviewWordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability5.3 Medium
- highfivery zero spam for wordpress, highfivery llc zero spam +1 moreWordPress Zero Spam for WordPress plugin <= 5.5.6 - Bypass Spam Protection vulnerability5.3 Medium
- boldgrid weformsWordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerability5.3 Medium
- fortinet fortisandboxA client-side enforcement of server-side security in Fortinet FortiSandbox version 4.4.0 through...8.6 High
- delta electronics diaenergieClient-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie8.8 High
- userproplugin userproUserPro <= 5.1.6 - Disabled Membership Registration Bypass5.3 Medium
- gallagher command centreClient-Side enforcement of Server-Side security for the Command Centre server could be bypassed...5.4 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 moreA client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet...6.2 Medium
- cloudflare warp, warp client +1 moreInsufficient Validation on Override Codes for Always-Enabled WARP Mode5.5 Medium
- zoom, zoom communications inc. clients, zoom rooms +1 more +3 moreClient-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a...6.1 Medium
- zoom, zoom communications inc. clients, zoom rooms +1 more +3 moreClient-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an...7.1 High
- palantir foundry workspace-server, com.palantir.workspace:workspace +1 moreFoundry workspace-server Developer Mode Authorization Bypass4.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities5.4 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities5.4 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities5.4 Medium
- lynx technik ag yellowbrik, lynx-technik yellobrik pec 1864 firmware +1 moreYellowbrik PEC-1864 authentication bypass9.8 Critical
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a...6.5 Medium
- aldo latino privatecontentPrivateContent <= 8.4.3 - Protection Mechanism Bypass5.3 Medium
- google chromeInsufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62...6.5 Medium
- google chromeInsufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62...7.4 High
- cognex 3d-a1000 dimensioning system, 3d-a1000 dimensioning system firmware +1 moreCognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security9.1 Critical
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed...6.5 Medium
- dell unisphere for powermax, evasa provider virtual appliance, powermax os +5 more +7 moreUnisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An...6.3 Medium
- dell unisphere for powermax, powermax os, solutions enabler +4 more +6 moreUnisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability....6.3 Medium
- cisco unified contact center domain manager, unified contact center management portal, unified contact center express +2 moreCisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability9.6 Critical
- dell unisphere for powermax, powermax os, solutions enabler +2 more +4 moreDell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass...8.1 High
- dell idrac9 firmware, integrated dell remote access controller (idrac) +1 moreDell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A...2.7 Low
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control...6.5 Medium
- abb ability™ symphony® plus operations, symphony \+ historian, symphony \+ operations +2 moreAuthentication Bypass in Symphony Plus9.8 Critical
amundsen-frontendPyPIUNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backendNo score- dell emc unisphere for powermax, emc unisphere for powermax virtual appliance, powermax os +1 more +3 moreDell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax...6.4 Medium
- rubyonrails rails, debian linux, rails https://github.com/rails/rails +2 moreCircumvention of file size limits in ActiveStorage7.5 High
- keycloakModerate severity vulnerability that affects org.keycloak:keycloak-core8.8 High
- prominent multiflex m10a controller firmwareA Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX...5.6 Medium
- accuenergy acuvim ii, acuvim ii axn-net ethernet module, axm-net +2 moreAccuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security7.5
- accuenergy acuvim ii, acuvim ii axn-net ethernet module, axm-net +2 moreAccuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security7.5