Weakness (CWE)
CWE-622: Improper Validation of Function Hook Arguments
Variant Draft
The product adds hooks to user-accessible API functions, but it does not properly validate the arguments.
How to prevent it (2 mitigations)
-
Architecture and Design
Ensure that all arguments are verified, as defined by the API you are protecting.
-
Architecture and Design
Drop privileges before invoking such functions, if possible.
Source: MITRE CWE-622
2 results · Feed
-
Medium 5.5
A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.
-
Medium 5.5CVE-2024-0311 Public exploit
A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.