CWE-419
Unprotected Primary Channel
The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.
Impactr finds and proves whether CWE-419 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.