Common Weakness Enumeration

    CWE Definition / CWE-863

    CWE-863: Incorrect Authorization

    The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

    Published:24 May 2011
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-285: Improper Authorization

    CWE-284: Improper Access Control