CWE-602: Client-Side Enforcement of Server-Side Security
The product includes a server that relies on the client to implement a protection mechanism that is intended to protect the server.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- mjobtimemJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the...9.8 Critical
- sonalsinha21 skt paypal for woocommerceSKT PayPal for WooCommerce <= 1.4 - Unauthenticated Payment Bypass7.5 High
- turkguven software technologies inc. perfektiveAuthentication Bypass in Turkguven's Perfektive7.3 High
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking – All in One Appointment Booking System | Appointment Scheduling, Booking Calendar & WooCommerce Bookings <= 1.1.27 - Missing Payment Verification to Unauthenticated Payment Bypass5.3 Medium
- the foreman foreman, red hat satellite 6, satellite 6.15 for rhel 8 +4 more +6 moreForeman: os command injection via ct_location and fcct_location parameters8.0 High
- ibm cloud pak for business automationsecurity vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.4.8 Medium
- wpclever wpc name your price for woocommerceWPC Name Your Price for WooCommerce <= 2.1.9 - Unauthenticated Price Alteration7.5 High
- gallagher command centre serverClient-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a...5.5 Medium
- efficientlab workexaminer professionalMissing Server-Side Authentication Checks in EfficientLab WorkExaminer Professional9.8 Critical
- ibm engineering requirements management doors nextIBM Engineering Requirements Management Doors Next data modification3.5 Low
- ibm engineering requirements management doors nextIBM Engineering Requirements Management Doors Next security bypass3.5 Low
- No product listedAn issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio...8.9 High
- viessmann vitogate 300Viessmann Vitogate 300 Authentication Bypass8.7 High
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Client-Side Enforcement of Server-Side Security8.6 High
- lumasoft fotoshare cloudClient-side password validation (CWE-602) in lumasoft fotoShare Cloud 2025-03-13 allowing...5.8 Medium
- railmedia order tip for woocommerceOrder Tip for WooCommerce <= 1.5.4 - Unauthenticated Tip Manipulation to Negative Value Leading to Unauthorized Discounts7.5 High
- litmuschaos litmusLitmusChaos Litmus client-side enforcement of server-side security5.3 Medium
- opexus foiaxpress public access link (pal), opexustech foiaxpress public access link +1 moreOPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass6.9 Medium
- ibm aspera faspexIBM Aspera Faspex bypass security6.5 Medium
- ibm smartcloud analytics log analysisIBM SmartCloud Analytics - Log Analysis security bypass5.5 Medium
- ibm smartcloud analytics log analysisIBM SmartCloud Analytics - Log Analysis security bypass5.5 Medium
- lenovo filez clientAn authentication bypass vulnerability was reported in FileZ client application that could allow...8.4 High
- ibm openpages with watsonIBM OpenPages with Watson improper input validation5.3 Medium
- ivanti connect secure, policy secure +1 moreImproper access control in the certificate management component of Ivanti Connect Secure before...6.3 Medium
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM...8.3 High
- salesforce omnistudioImproper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows...5.3 Medium
- uchida yoko co., ltd. wivia 5, uchida wivia 5 firmware +1 moreClient-side enforcement of server-side security issue exists in wivia 5 all versions. If...6.9 Medium
- ibm aspera faspexIBM Aspera Faspex data modification7.1 High
- cisco unified intelligence center, unified contact center express +1 moreCisco Unified Intelligence Center Privilege Escalation Vulnerability7.1 High
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM...9.4 Critical
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM...9.4 Critical
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +8 more +10 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM...9.4 Critical
- digitro ngc explorerDígitro NGC Explorer Password Transmission client-side enforcement of server-side security6.3 Medium
- huawei harmonyosOut-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation...6.2 Medium
- multi uploaders multiple file upload, multiple file upload project file upload +1 moreOutsystems Multiple File Upload < 3.1.0 is vulnerable to Unrestricted File Upload. The...6.4 Medium
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation denial of service6.5 Medium
- meon kyc solutionsCaptcha Bypass Vulnerability in Meon KYC solutions8.2 High
- w. w. norton inquizitiveW. W. Norton InQuizitive through 2025-04-08 allows students to insert arbitrary records of their...7.7 High
- zammadIn Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When...4.8 Medium
- fortinet fortisandboxA client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet...4.2 Medium
- No product listedAn issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2...8.1 High
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330...9.8 Critical
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation security bypass6.5 Medium
- umbraco forms, umbraco.forms.issues +1 moreShort and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms5.8 Medium
- tecno com.transsion.applockA logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing...9.8 Critical
- ivanti connect secureInsufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before...7.1 High
- ethyca fidesPassword Policy Bypass Vulnerability in Fides Webserver2.0 Low
- axis communications ab camera station, camera station pro +1 moreSeth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to...4.4 Medium
- fortinet fortianalyzer, fortimanager, fortianalyzer big data +2 moreA client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least...7.1 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Authorization Bypass Vulnerability4.3 Medium
- Show moreLoading…