Weaknesses of type CWE-420

41 results

Canal alternativo desprotegido

Quando uma aplicação oferece múltiplos canais de comunicação ou acesso (HTTP junto com HTTPS, API pública junto com API interna, backdoor administrativo), mas protege apenas alguns deles, um atacante usa o canal desprotegido para contornar os controles de segurança. É como ter um portão eletrônico na frente, mas deixar a porta dos fundos aberta.

Example

Uma plataforma oferece autenticação forte em HTTPS, mas mantém a mesma funcionalidade acessível via HTTP sem encriptação; ou uma API interna sem autenticação fica exposta na mesma rede que a API pública protegida por token. Um atacante consegue acessar dados sensíveis ou executar ações privilegiadas através do canal menos protegido.

How to mitigate

Desabilite ou remova canais alternativos desnecessários; se precisar de múltiplos canais, aplique os mesmos controles de segurança (autenticação, encriptação, autorização) em todos eles. Audite regularmente quais interfaces e protocolos sua aplicação expõe e valide se cada um tem proteção equivalente.

CVE-2023-30946LOWIssues notification metadata lacks authorizationEPSS 0.4%CVE-2026-77639MEDIUMTor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just underEPSS 0.4%CVE-2025-56558LOWThe Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by a client that has the correct values of AWS_ACCESS_EPSS 0.4%CVE-2025-62001HIGHBullWall Ransomware Containment hard-coded folder exclusionsEPSS 0.4%CVE-2023-4570HIGHImproper Restriction in NI MeasurementLink Python ServicesEPSS 0.3%CVE-2025-59033HIGHThe Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only tEPSS 0.3%CVE-2023-7266HIGHSome Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or informatiEPSS 0.3%CVE-2025-8557HIGHAn internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability: An attacker with access to a EPSS 0.3%CVE-2025-66432MEDIUMIn Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.EPSS 0.2%CVE-2026-40435MEDIUMBIG-IP httpd access control vulnerabilityEPSS 0.2%CVE-2025-62820MEDIUMSlack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network.EPSS 0.2%CVE-2024-8038HIGHVulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available withoutEPSS 0.2%CVE-2025-52968LOWxdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies, which can facilitate CSRF. (For example, xdg-open EPSS 0.2%CVE-2026-102134MEDIUMKiteworks Core Unprotected Alternate ChannelEPSS 0.2%CVE-2026-61909LOWAn issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shEPSS 0.2%CVE-2026-43505MEDIUMAn issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5, when mod_proxy65 is enabled. Because mod_proxy65 miEPSS 0.2%CVE-2025-41727HIGHBeckhoff: Performing privileged operations and gaining administrator accessEPSS 0.2%CVE-2022-28693MEDIUMUnprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially eEPSS 0.2%CVE-2023-52718MEDIUMA connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or infoEPSS 0.2%CVE-2025-1095HIGHIBM Personal Communications command executionEPSS 0.1%