1827
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1011 Authorize Actors 2425
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 417 Communication Channel Errors 2325
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Access Control Gain Privileges or Assume Identity
Bypass Protection Mechanism
Potential Mitigations
Phase: Architecture and Design
Do not expose administrative functionnality on the user UI.
Phase: Architecture and Design
Protect the administrative/restricted functionality with a strong authentication mechanism.
MemberOf Relationships
CWE Version 4.14
CWE-420: Unprotected Alternate Channel
CWE-420: Unprotected Alternate Channel