Product Released in Non-Release Configuration
CWE-1269
The product released to market is released in pre-production or manufacturing configuration.
We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 9.9.
How this weakness is prevented
- Implementation Integration Manufacturing Implementation: Ensure that there exists a marker for denoting the Manufacturing Complete stage and that the Manufacturing Complete marker gets updated at the Manufacturing Complete stage (i.e., the Manufacturing Complete fuse gets blown).
Latest Product Released in Non-Release Configuration vulnerabilities
- 9.9 Critical severity
Velociraptor: Improper Neutralization of Internal Special Elements
Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt. Although the field "compiled_collector_args" is an internal field, Velociraptor allowed the field to be set from a user
- 9.8 Critical severity
imx6 bundle: Product Released in Non-Release Configuration
A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web application (due to the “debug” configuration parameter set to “True”) allows a remote unauthenticated attacker to access critical information