Description
View on MITRENo mitigation information available for this CWE.
No detection method information available for this CWE.
No examples or observed CVEs available for this CWE.
CWE-224: CWE-224: Obscured Security-relevant Information by Alternate Name is a Common Weakness Enumeration (CWE) entry maintained by MITRE. Description
If exploited, CWE-224 (CWE-224: Obscured Security-relevant Information by Alternate Name) it can compromise Hide Activities and Gain Privileges or Assume Identity, leading to outcomes such as Scope: Non-Repudiation and Access Control.
CWE-224 commonly affects Languages. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
A CWE (Common Weakness Enumeration) like CWE-224 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.