Weakness (CWE)
CWE-419: Unprotected Primary Channel
The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.
How to prevent it (2 mitigations)
-
Architecture and Design
Do not expose administrative functionality on the user UI.
-
Architecture and Design
Protect the administrative/restricted functionality with a strong authentication mechanism.
Source: MITRE CWE-419
3 results · Clear filters · Feed
-
Medium 6.5
Silicon Labs PC Controller Denial of Service Vulnerability
Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability …
-
Medium 5.3
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotec…
-
Medium 6.5CVE-2019-11248 EPSS 75%
Kubernetes kubelet exposes /debug/pprof info on healthz port
The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory …