CWE-417: Inadequate Communication Channel Management Weaknesses
This CWE category encompasses weaknesses related to inadequate management of communication channels and access paths, leading to difficulties in controlling or eliminating alternative channels. These weaknesses are often exploited in "bypass" attacks that leverage authentication errors.
Summary
This category encompasses weaknesses that arise from inadequate management of communication channels and access paths. These weaknesses manifest as difficulties in establishing, controlling, or eliminating alternative channels and paths. Certain weaknesses in this category may coincide with virtual file issues and are frequently exploited in "bypass" attacks that take advantage of authentication errors.