CWE-637: Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')
Filter
The product uses a more complex mechanism than necessary, which could lead to resultant weaknesses when the mechanism is not correctly understood, modeled, configured, implemented, or used.
What the weakness is: CWE-637 at MITRE. All weaknesses
Ask an AI about CWE-637
Show the prompt
Explain CWE-637: Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism') and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/637.html and https://cve.bz/cve/cwe/637?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.3CVE-2026-9058EPSS 0.3%
For untrusted certificates that contain the "Authority Information Access - caIssuers URI" extension, Szafir SDK will automatically download the parent CA certificate from the specified URL and will import it to its trust store as a "nonqu…