Security

Configuration Import

Configuration import is an appliance or application function that restores settings from an uploaded backup file, replacing accounts, routing and system values in one operation. If it is reachable without authentication, an attacker can rewrite the whole device configuration.

Deep dive

Learn Article

What Is an Alternate Path Authentication Bypass?

An alternate path authentication bypass (CWE-288) lets attackers reach a privileged function by a route that skips login. How it works and how to find it.

beginner 4 min read

Back to glossary