Base weakness
Draft
The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.
Last updated
CWE-419 (Unprotected Primary Channel) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.
9 recorded CVEs are caused by CWE-419 (Unprotected Primary Channel). The highest-severity and most recent are shown first. 0 new CWE-419 CVEs have been recorded so far in 2026 (1 in 2025).
Unprotected Exposed Firebird Database with default credentials
Envoy Admin Interface Exposed through prometheus metrics endpoint
What can happen when CWE-419 is exploited.
Gain Privileges or Assume Identity, Bypass Protection Mechanism
Affects: Access Control
Typically introduced during these phases of the software lifecycle.
Practical mitigations for CWE-419, grouped by where in the lifecycle they apply.
Do not expose administrative functionnality on the user UI.
Protect the administrative/restricted functionality with a strong authentication mechanism.
CAPEC attack patterns that exploit this weakness.
Common questions about CWE-419.
Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.
Get an alert when a new CWE-419 CVE affects your products, with AI-written analysis and remediation steps.