CWE-420 Unprotected Alternate Channel
Description
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-420 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-95pq-hr8p-f5g7 | CVE-2025-67303 | HIGH |
ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420) |
2026-06-22 | |
| GHSA-2hc9-cc65-xwj8 | - | HIGH |
Duplicate Advisory: ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420) |
2026-06-22 | |
| GHSA-wxxx-gvqv-xp7p | CVE-2026-40217 | HIGH |
LiteLLM has a sandbox escape in custom-code guardrail |
2026-05-11 | |
| GHSA-3926-2jvf-fg29 | - | HIGH |
Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail |
2026-05-11 | |
| GHSA-x6fh-7qmf-69xh | CVE-2025-62820 | MODERATE |
Slack Nebula may accept arbitrary source IP addresses |
2025-10-23 | |
| GHSA-85qf-6845-m8p2 | - | HIGH |
Duplicate Advisory: Juju Unprotected Alternate Channel vulnerability |
2024-10-02 | |
| GHSA-3f48-9j7q-q2gv | CVE-2023-4570 | HIGH |
NI MeasurementLink Python Services Improper Access Restriction vulnerability |
2023-10-05 | |
| GHSA-232p-vwff-86mp | CVE-2023-28840 | HIGH |
Docker Swarm encrypted overlay network may be unauthenticated |
2023-04-05 | |
| GHSA-6wrf-mxfj-pf5p | CVE-2023-28842 | MODERATE |
Docker Swarm encrypted overlay network with a single endpoint is unauthenticated |
2023-04-05 | |
| GHSA-wqv3-8cm6-h6wg | CVE-2020-8558 | HIGH |
Improper Authentication in Kubernetes |
2023-01-06 |