Attacks/Tool Shadow/SHADOW-007

CRITICALCWE-522

SHADOW-007 Credential Harvesting via Proxy Query

Tool Shadow: Attempts to shadow, replace, or proxy legitimate tools to intercept data or modify behavior

Description

Queries for credentials through the insecure proxy to harvest stored secrets

Remediation

Block dynamic tool creation that accesses credentials.

Severity

CRITICAL

OASB Control

CWE

CWE-522

PreviousSHADOW-006 Parameter Injection via Fund Transfer NextSHADOW-008 Large Fund Transfer via Insecure Proxy