CWE-628—Function Call with Incorrectly Specified Arguments

Weakness Name

Function Call with Incorrectly Specified Arguments

Description

The product calls a function, procedure, or routine with arguments that are not correctly specified, leading to always-incorrect behavior and resultant weaknesses.

There are multiple ways in which this weakness can be introduced, including:

Common Consequences

Scope:

Other, Access Control

Impact:

Quality Degradation, Gain Privileges or Assume Identity

Notes:

This weakness can cause unintended behavior and can lead to additional weaknesses such as allowing an attacker to gain unintended access to system resources.

Related Weaknesses

• CWE-573Improper Following of Specification by Caller