CWE-58—Path Equivalence: Windows 8.3 Filename

Weakness Name

Path Equivalence: Windows 8.3 Filename

Description

The product contains a protection mechanism that restricts access to a long filename on a Windows operating system, but it does not properly restrict access to the equivalent short "8.3" filename.

Common Consequences

Scope:

Confidentiality, Integrity

Impact:

Read Files or Directories, Modify Files or Directories

Related Weaknesses

• CWE-41Improper Resolution of Path Equivalence