OASB
Attacks/Tool Shadow/SHADOW-008
CRITICALCWE-441

SHADOW-008 Large Fund Transfer via Insecure Proxy

Tool Shadow: Attempts to shadow, replace, or proxy legitimate tools to intercept data or modify behavior

Description

Transfers a large sum through the proxy without amount limits or destination verification

Remediation

Tool chain priority must be immutable at runtime. Block insertion of tools from user input.

Severity

CRITICAL

OASB Control

2.2

CWE

CWE-441