Common Weakness Enumeration

    CWE Definition / CWE-638

    CWE-638: Not Using Complete Mediation

    The product does not perform access checks on a resource every time the resource is accessed by an entity, which can create resultant weaknesses if that entity's rights or privileges change over time.

    Published:18 Jan 2008
    Organization:MITRE
    Modified:26 Oct 2023

    Related Weakness

    CWE-657: Violation of Secure Design Principles

    CWE-862: Missing Authorization