CWE-223 - Omission of Security-relevant Information
- Abstraction:Base
- Structure:Simple
- Status:Draft
- Release Date:2006-07-19
- Latest Modification Date:2023-10-26
Weakness Name
Omission of Security-relevant Information
Description
The product does not record or display information that would be important for identifying the source or nature of an attack, or determining if an action is safe.
Common Consequences
Scope: Non-Repudiation
Impact: Hide Activities
Notes: The source of an attack will be difficult or impossible to determine. This can allow attacks to the system to continue without notice.