OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.