Skip to content
OpenAdvisories

Weakness (CWE)

CWE-420: Unprotected Alternate Channel

Base Draft

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.

Source: MITRE CWE-420

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-25916 Public exploit

    Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.

    Roundcube Webmail roundcube roundcube Debian Ubuntu
  • Medium 5.4
    CVE-2020-8558 Public exploit

    Kubernetes node setting allows for neighboring hosts to bypass localhost boundary

    The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network …

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go