Common Weakness Enumeration

    CWE Definition / CWE-636

    CWE-636: Not Failing Securely ('Failing Open')

    When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

    Published:18 Jan 2008
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-657: Violation of Secure Design Principles

    CWE-755: Improper Handling of Exceptional Conditions

    CWE-280: Improper Handling of Insufficient Permissions or Privileges