CWE-912

Overview
  • CWE ID
  • 912
  • CWE Name
  • Hidden Functionality
  • CWE Abstraction
  • Class
  • CWE structure
  • Simple
  • CWE Status
  • Incomplete
Description
The software contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the software's users or administrators.
Extended Description
Hidden functionality can take many forms, such as intentionally malicious code, "Easter Eggs" that contain extraneous functionality such as games, developer-friendly shortcuts that reduce maintenance or support costs such as hard-coded accounts, etc. From
Related CWEs
CWE ID View ID Nature Ordinal
684 1000 ChildOf Primary