CWE-622 Improper Validation of Function Hook Arguments

variant

The product adds hooks to user-accessible API functions, but it does not properly validate the arguments. This could lead to resultant vulnerabilities.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-0311US—Exploit
A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code.
CVE-2024-0312US——
A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password.
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan