CWE-420 (Unprotected Alternate Channel) is a common software weakness type identified by the CWE (Common Weakness Enumeration) dictionary. It helps developers understand security flaws and how to mitigate them.

What is the difference between CVE and CWE?

CWE refers to the type of software weakness (the root cause), while CVE refers to a specific instance of a vulnerability in a particular product or system.

CWE-420

Unprotected Alternate Channel

Weakness Description

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Potential Mitigations

Architecture and Design

Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.

Common Consequences

Access Control

Gain Privileges or Assume IdentityBypass Protection Mechanism

Related Weaknesses

CWE-923

Related Resources

Browse CWE Database

Explore 493 software weaknesses

CVE Database

Search 294,000+ vulnerabilities

Security Writeups

Learn from real-world examples

About 4nuxd

Cybersecurity research & tools

Contact Us

Get in touch for collaboration

Homepage

Explore more security resources