OASB
Attacks/Tool Shadow/SHADOW-009
CRITICALCWE-506

SHADOW-009 Unsigned Document Signing via Proxy

Tool Shadow: Attempts to shadow, replace, or proxy legitimate tools to intercept data or modify behavior

Description

Signs a document claiming CVE authority through the insecure proxy without verification

Remediation

Built-in tools must be immutable. Tool replacement requires signed updates from trusted sources.

Severity

CRITICAL

OASB Control

2.2

CWE

CWE-506
PreviousSHADOW-008 Large Fund Transfer via Insecure ProxyNextSHADOW-010 Multi-Vector Shadow Attack via SQL Injection