CWE-628 - Function Call with Incorrectly Specified Arguments
- 摘要：Base
- 结构：Simple
- 状态：Draft
- 发布日期：2007-05-07
- 更新日期：2025-12-11
名称
Function Call with Incorrectly Specified Arguments
描述
The product calls a function, procedure, or routine with arguments that are not correctly specified, leading to always-incorrect behavior and resultant weaknesses.
There are multiple ways in which this weakness can be introduced, including:
常见后果
范围：Other, Access Control
影响：Quality Degradation, Gain Privileges or Assume Identity
注释：This weakness can cause unintended behavior and can lead to additional weaknesses such as allowing an attacker to gain unintended access to system resources.