CWE-622
2 CVEs • Abstraction: Variant
Improper Validation of Function Hook Arguments
The product adds hooks to user-accessible API functions, but it does not properly validate the arguments. This could lead to resultant vulnerabilities.
CVEs (2)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password. |
A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code. |