CWEweakness

CWE-224 Obscured Security-relevant Information by Alternate Name

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product records security-relevant information according to an alternate name of the affected entity, instead of the canonical name.

Common consequences

• Non-Repudiation, Access Control: Hide Activities, Gain Privileges or Assume Identity

Observed examples

• CVE-2002-0725: Chain: File system allows local attackers to hide file usage activities via a hard link (CWE-65) to the target file, which causes the link to be recorded in the audit trail instead of the target file (CWE-221).

Related

Observed example · CVE (1)

  • CVE-2002-0725 NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target… vulnerability

Child of · CWE (1)

  • CWE-221 Information Loss or Omission weakness

Referenced by CVE · weakness (1)

  • CVE-2026-49426 When auditing a system call executed via ptrace(PT_SC_REMOTE), the kernel passed the return value of an internal setup function to… vulnerability