Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.
No detection method information available for this CWE.
No examples or observed CVEs available for this CWE.
No relationship information available for this CWE.
CWE-420: CWE-420: Unprotected Alternate Channel is a Common Weakness Enumeration (CWE) entry maintained by MITRE. Description
If exploited, CWE-420 (CWE-420: Unprotected Alternate Channel) it can compromise Gain Privileges or Assume Identity and Bypass Protection Mechanism, leading to outcomes such as Scope: Access Control.
Recommended mitigations for CWE-420 include: Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.
CWE-420 commonly affects Languages. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
A CWE (Common Weakness Enumeration) like CWE-420 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.