CWE-1056 Invokable Control Element with Variadic Parameters
baseA named-callable or method control element has a signature that supports a variable (variadic) number of parameters or arguments.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (7)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-13927US | critical9.8OT critical | KEV | ||
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Ai… | ||||
| CVE-2017-6331US | high7.1 | Exploit | ||
Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a type of attack that bypasses the real time protection for th… | ||||
| CVE-2020-27606US | medium5.3 | — | ||
BigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie… | ||||
| CVE-2010-5148US | medium5.0 | — | ||
Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session (SSL) cookie in an https session, which makes it easier for remote at… | ||||
| CVE-2023-38363US | medium4.3 | — | ||
IBM CICS TX Advanced 10.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to… | ||||
| CVE-2020-4763US | medium4.3 | — | ||
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to… | ||||
| CVE-2023-33847US | low3.1 | — | ||
IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 does not set the secure attribute on authorization tokens or session cookies… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan