CWE-224—Obscured Security-relevant Information by Alternate Name

Weakness Name

Obscured Security-relevant Information by Alternate Name

Description

The product records security-relevant information according to an alternate name of the affected entity, instead of the canonical name.

Common Consequences

Scope:

Non-Repudiation, Access Control

Impact:

Hide Activities, Gain Privileges or Assume Identity

Related Weaknesses

• CWE-221Information Loss or Omission