CWE-419: Unprotected Primary Channel
The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.
Last updated
Overview
CWE-419 (Unprotected Primary Channel) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.
Real-world CVEs
9 recorded CVEs are caused by CWE-419 (Unprotected Primary Channel). The highest-severity and most recent are shown first. 0 new CWE-419 CVEs have been recorded so far in 2026 (1 in 2025).
- CVE-2024-50588
Unprotected Exposed Firebird Database with default credentials
Critical · CVSS 9.8 · EPSS 50th2024-11-08 - CVE-2023-30859Critical · CVSS 9.8 · EPSS 62th2023-05-01
- CVE-2024-2414High · CVSS 8.8 · EPSS 20th2024-03-13
- CVE-2019-11248High · CVSS 8.2 · EPSS 99th2019-08-29
- CVE-2018-12120High · CVSS 8.1 · EPSS 90th2018-11-28
- CVE-2018-12539High · CVSS 7.8 · EPSS 40th2018-08-14
- CVE-2025-24030
Envoy Admin Interface Exposed through prometheus metrics endpoint
High · CVSS 7.1 · EPSS 35th2025-01-23 - CVE-2022-33932Medium · CVSS 5.3 · EPSS 56th2022-08-22
- CVE-2024-39886Low · CVSS 3.7 · EPSS 17th2024-07-10
Common consequences
What can happen when CWE-419 is exploited.
Gain Privileges or Assume Identity, Bypass Protection Mechanism
Affects: Access Control
How it happens
When it is introduced
Typically introduced during these phases of the software lifecycle.
How to prevent it
Practical mitigations for CWE-419, grouped by where in the lifecycle they apply.
Do not expose administrative functionnality on the user UI.
Protect the administrative/restricted functionality with a strong authentication mechanism.
Terminology & mappings
Mapped taxonomies
- PLOVER: Unprotected Primary Channel
Attack patterns
CAPEC attack patterns that exploit this weakness.
Frequently asked questions
Common questions about CWE-419.
- What is CWE-419?
- The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.
- What CVEs are caused by CWE-419?
- 9 recorded CVEs are attributed to CWE-419, including CVE-2024-50588, CVE-2023-30859, CVE-2024-2414.
- How do you prevent CWE-419?
- Do not expose administrative functionnality on the user UI.
- What are the consequences of CWE-419?
- Exploiting CWE-419 can lead to: Gain Privileges or Assume Identity, Bypass Protection Mechanism.
- Is CWE-419 actively exploited?
- 9 recorded CVEs are caused by CWE-419; none are currently in CISA's KEV catalog of actively exploited flaws.
References
- MITRE CWE definition (CWE-419) (opens in a new tab)
- CWE-419 vulnerabilities on NVD (opens in a new tab)
- Learn: What is a CWE?
Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.
Stay ahead of CWE-419
Get alerted the moment a new CWE-419 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.