COMMON WEAKNESS ENUMERATIONIncomplete

CWE-224

Obscured Security-relevant Information by Alternate Name

The product records security-relevant information according to an alternate name of the affected entity, instead of the canonical name.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product records security-relevant information according to an alternate name of the affected entity, instead of the canonical name.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Yaşam döngüsü evresi

Operation

Risk

Başarılı sömürü neye yol açar?

Hide ActivitiesGain Privileges or Assume Identity

Etkilenen güvenlik alanları: Non-Repudiation, Access Control

Savunma

Nasıl önlenir ve çözülür?

  • Follow secure coding guidelines for input handling and boundary checking.
  • Enforce strict security reviews and automated static analysis (SAST) checks.