CWE-656—Reliance on Security Through Obscurity

PUBLISHEDweakness record
released 2008-01-30 · last modified 2025-12-11

Metadata

CWE ID：
CWE-656
摘要：
Class
结构：
Simple
状态：
Draft
发布日期：
2008-01-30
更新日期：
2025-12-11

名称

Reliance on Security Through Obscurity

描述

The product uses a protection mechanism whose strength depends heavily on its obscurity, such that knowledge of its algorithms or key data is sufficient to defeat the mechanism.

This reliance on "security through obscurity" can produce resultant weaknesses if an attacker is able to reverse engineer the inner workings of the mechanism. Note that obscurity can be one small part of defense in depth, since it can create more work for an attacker; however, it is a significant risk if used as the primary means of protection.

常见后果

范围：
Confidentiality, Integrity, Availability, Other
影响：
Other
注释：
The security mechanism can be bypassed easily.

相关 CWE

browse all CWEs