CWE-638: Not Using Complete Mediation
Filter
The product does not perform access checks on a resource every time the resource is accessed by an entity, which can create resultant weaknesses if that entity's rights or privileges change over time.
What the weakness is: CWE-638 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-104 Cross Zone Scripting Likelihood: Medium · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-638, as MITRE names them. Credits.
Ask an AI about CWE-638
Show the prompt
Explain CWE-638: Not Using Complete Mediation and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/638.html and https://cve.bz/cve/cwe/638?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 2.1CVE-2024-56512ExploitEPSS 3.3%
Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group ca…