CWE-628—Function Call with Incorrectly Specified Arguments

名称

Function Call with Incorrectly Specified Arguments

描述

The product calls a function, procedure, or routine with arguments that are not correctly specified, leading to always-incorrect behavior and resultant weaknesses.

There are multiple ways in which this weakness can be introduced, including:

常见后果

范围：

Other, Access Control

影响：

Quality Degradation, Gain Privileges or Assume Identity

注释：

This weakness can cause unintended behavior and can lead to additional weaknesses such as allowing an attacker to gain unintended access to system resources.

相关 CWE

• CWE-573Improper Following of Specification by Caller