CWE-648 - Incorrect Use of Privileged APIs

Description

The application does not conform to the API requirements for a function call that requires extra privileges. This could allow attackers to gain privileges by causing the function to be called incorrectly.

Latest vulnerabilities for CWE-648

Privilege escalation in Siemens Unicam FX 2024-02-14
Low Yes

Incorrect use of privileged APIs in IBM Cloud Pak for Security (CP4S) 2023-05-25
Medium Yes

Multiple vulnerabilities in MediaTek chipsets 2022-12-05
Low Yes

Information disclosure in ownCloud Server 2020-02-28
Low Yes

References

Description of CWE-648 on Mitre website