Common Weakness Enumeration

    CWE Definition / CWE-636

    CWE-636: Not Failing Securely ('Failing Open')

    When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

    Published:N/A
    Organization:
    Modified:N/A

    Related Weakness

    CWE-657: Violation of Secure Design Principles

    CWE-755: Improper Handling of Exceptional Conditions

    CWE-280: Improper Handling of Insufficient Permissions or Privileges