Skip to content
OpenAdvisories

Weakness (CWE)

CWE-419: Unprotected Primary Channel

Base Draft

The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Do not expose administrative functionality on the user UI.

  2. Architecture and Design

    Protect the administrative/restricted functionality with a strong authentication mechanism.

Source: MITRE CWE-419

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.2
    CVE-2025-31964

    HCL BigFix IVR is impacted by an improper service binding configuration

    Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local a…

    HCLSoftware BigFix IVR
  • Low 3.7
    CVE-2024-39886

    TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App commu…

    DREAM TRAIN INTERNET TONE store App