CWE-671: Lack of Administrator Control over Security
The product uses security features in a way that prevents the product's administrator from tailoring security settings to reflect the environment in which the product is being used.
A kind of CWE-657 Violation of Secure Design Principles.
From the CWE List. © The MITRE Corporation.
Newest
- hashgraph guardian, nozomi networks arc, cmc +1 more +3 more Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 5.3 Medium
- nozomi networks remote collector Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0 8.3 High
- matrix-org mjolnir Mjolnir v1.9.0 accepts commands from any room 9.1 Critical
- redhat libnbd, red hat enterprise linux 6, enterprise linux 7 +3 more +5 more Libnbd: malicious nbd server may crash libnbd 5.3 Medium
- cisco nx-os, nx-os software +1 more A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000... 5.4 Medium
- nextcloud server, kiteworks security-advisories +1 more Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server 3.5 Low
- sophos ssl vpn client Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN... 8.8 High