CWE-58
Path Equivalence: Windows 8.3 Filename
AI Translation Available
The product contains a protection mechanism that restricts access to a long filename on a Windows operating system, but it does not properly restrict access to the equivalent short '8.3' filename.
Status
incomplete
Abstraction
variant
Affected Platforms
Technical Details
AI Translation
Common Consequences
confidentiality
integrity
Impacts
read files or directories
modify files or directories
Potential Mitigations
Phases:
system configuration
Descriptions:
•
Disable Windows from supporting 8.3 filenames by editing the Windows registry. Preventing 8.3 filenames will not remove previously generated 8.3 filenames.
Functional Areas
file processing