CWE-224 — Obscured Security-relevant Information by Alternate Name
CWE-224: Obscured Security-relevant Information by Alternate Name
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Incomplete |
| Likelihood of exploit | — |
Description
The product records security-relevant information according to an alternate name of the affected entity, instead of the canonical name.
Common consequences
- Non-Repudiation, Access Control: Hide Activities, Gain Privileges or Assume Identity
Mitigations
(none listed)
References
- CWE page: https://cwe.mitre.org/data/definitions/224.html
- CWE list: https://cwe.mitre.org/data/index.html