Skip to content
OpenAdvisories

Weakness (CWE)

CWE-446: UI Discrepancy for Security Feature

Class Incomplete

The user interface does not correctly enable or configure a security feature, but the interface provides feedback that causes the user to believe that the feature is in a secure state.

Source: MITRE CWE-446

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.9
    CVE-2025-8353

    UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 a…

    Devolutions Server
  • High 7.2
    CVE-2025-52983

    Junos OS: After removing ssh public key authentication root can still log in

    A UI Discrepancy for Security Feature vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device. On VM Host Routing Engines (RE), even if the configured public key for root ha…

    Juniper Networks Junos OS Network devices
  • Low 3.7
    CVE-2023-1768

    Symmetric agent data encryption fails silently

    Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption of agent data to fail silently and transmit the data in plaintext in certain configurations.

    Tribe29 Checkmk check-mk Ubuntu