CWE-923 Improper Restriction of Communication Channel to Intended Endpoints
Description
The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-923 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-w34q-cm8f-9c5x | CVE-2026-81871 | MODERATE |
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning |
2026-09-17 | |
| GHSA-m3c3-78fh-w3w7 | CVE-2025-71390 | MODERATE | - |
SurrealDB allows bypass of deny-net flags via DNS resolution |
2026-09-04 |
| GHSA-3vj4-cvjp-482h | CVE-2015-8914 | CRITICAL |
OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism |
2025-04-14 | |
| GHSA-qpwc-p365-pqrr | CVE-2016-5362 | HIGH |
OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism |
2025-04-14 | |
| GHSA-h828-v5pv-33qx | CVE-2022-2837 | MODERATE |
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints |
2025-03-07 | |
| GHSA-ch7v-37xg-75ph | CVE-2022-2835 | MODERATE |
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints |
2023-03-14 |