CWE-224 - Obscured Security-relevant Information by Alternate Name
- Abstraction:Base
- Structure:Simple
- Status:Incomplete
- Release Date:2006-07-19
- Latest Modification Date:2023-10-26
Weakness Name
Obscured Security-relevant Information by Alternate Name
Description
The product records security-relevant information according to an alternate name of the affected entity, instead of the canonical name.
Common Consequences
Scope: Non-Repudiation, Access Control
Impact: Hide Activities, Gain Privileges or Assume Identity
Related Weaknesses
Oracle Health breach compromises patient data at US hospitals
Oracle denies breach after hacker claims theft of 6 million data records
Attackers are targeting CrushFTP vulnerability with public PoC (CVE-2025-2825)
We Smell a (DC)Rat: Revealing a Sophisticated Malware Delivery Chain
Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp
CrushFTP: Patch critical vulnerability ASAP! (CVE-2025-2825)
PoisonSeed phishing campaign behind emails with wallet seed phrases
CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability
CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVE-2024-50302 Linux Kernel Use of Uninitialized Resource Vulnerability
CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability
CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability
CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability