CWE-288

GPTKB entity

Statements (19)
Predicate Object
gptkbp:instanceOf gptkb:Common_Weakness_Enumeration
gptkbp:category Security weakness
gptkbp:citation https://cwe.mitre.org/data/definitions/288.html
gptkbp:consequence Unauthorized access
Privilege escalation
gptkbp:describes A situation where authentication is bypassed by using an alternate path or channel
gptkbp:foundIn Network protocols
Web applications
https://www.w3.org/2000/01/rdf-schema#label CWE-288
gptkbp:mitigatedBy Enforce authentication on all access paths
Validate all channels for authentication
gptkbp:name Authentication Bypass Using an Alternate Path or Channel
gptkbp:partOf gptkb:CWE
gptkbp:relatedTo Authorization
Authentication
gptkbp:vulnerableTo 288
gptkbp:bfsParent gptkb:CVE-2022-1040
gptkb:CVE-2023-35036
gptkbp:bfsLayer 7