# CWE-602.

Every Advisory and CVE whose sources give the weakness CWE-602, newest first.

## Records, newest first (an older page)

- [SOOIL Developments Co., Ltd Diabecare RS…: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A…](https://agentprime.io/advisories/CVE-2020-27268.md)
  `CVE-2020-27268` · CVE record: SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A · No CVSS score · Not analysed yet · Published 19 Jan 2021 · Tags: CWE-602
- [Authentication Bypass in Symphony Plus](https://agentprime.io/advisories/CVE-2020-24683.md)
  `CVE-2020-24683` · CVE record: ABB ABB Ability™ Symphony® Plus Operations · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Dec 2020 · Tags: CWE-305, CWE-602
- [UNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backend](https://agentprime.io/advisories/GHSA-47qg-q58v-7vrp.md)
  `GHSA-47qg-q58v-7vrp` · PyPI `amundsen-frontend`: affected `>=2.3.0, <3.1.0 || >=3.0.0, <3.1.0`, fixed in `3.1.0` · No CVSS score · Not analysed yet · Published 2 Dec 2020 · Tags: CWE-602
- [Dell Unisphere for PowerMax: Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17…](https://agentprime.io/advisories/CVE-2020-5345.md)
  `CVE-2020-5345` · CVE record: Dell Unisphere for PowerMax · CVSS 6.4 Medium · Not analysed yet · Published 23 Jun 2020 · Tags: CWE-602
- [Circumvention of file size limits in ActiveStorage](https://agentprime.io/advisories/GHSA-m42x-37p3-fv5w.md)
  `GHSA-m42x-37p3-fv5w`, `CVE-2020-8162` · RubyGems `activestorage`: affected `>=5.0.0, <5.2.4.3 || >=6.0.0, <6.0.3.1`, fixed in `5.2.4.3`, `6.0.3.1` · CVSS 7.5 High · Not analysed yet · Published 26 May 2020 · Tags: Unrestricted file upload, CWE-602
- [Moderate severity vulnerability that affects org.keycloak:keycloak-core](https://agentprime.io/advisories/GHSA-959q-32g8-vvp7.md)
  `GHSA-959q-32g8-vvp7`, `CVE-2017-12161` · Maven `org.keycloak:keycloak-core`: affected `<3.4.2`, fixed in `3.4.2` · No CVSS score · Not analysed yet · Published 18 Oct 2018 · Tags: CWE-602
- [ProMinent MultiFLEX M10a Controller: A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent…](https://agentprime.io/advisories/CVE-2017-14013.md)
  `CVE-2017-14013` · CVE record: ProMinent MultiFLEX M10a Controller · No CVSS score · Not analysed yet · Published 17 Oct 2017 · Tags: CWE-602
- [Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security](https://agentprime.io/advisories/CVE-2014-2374.md)
  `CVE-2014-2374` · CVE record: Accuenergy Accuenergy Acuvim II AXN-NET Ethernet module · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2014 · Tags: CWE-602
- [Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side Security](https://agentprime.io/advisories/CVE-2014-2373.md)
  `CVE-2014-2373` · CVE record: Accuenergy Accuenergy Acuvim II AXN-NET Ethernet module · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2014 · Tags: CWE-602

Newest: <https://agentprime.io/advisories/tag/cwe-602.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-602&cursor=WyIyMDIxLTA0LTMwVDIwOjU1OjIxLjU2MDAwMFoiLCJDVkUtMjAyMS0yMTU0NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-602/?cursor=WyIyMDIxLTA0LTMwVDIwOjU1OjIxLjU2MDAwMFoiLCJDVkUtMjAyMS0yMTU0NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.