CWE-224

Obscured Security-relevant Information by Alternate Name
AI Translation Available

The product records security-relevant information according to an alternate name of the affected entity, instead of the canonical name.

Status
incomplete
Abstraction
base

Common Consequences

non-repudiation access control
Impacts
hide activities gain privileges or assume identity

Potential Mitigations