CWE-358 (Improperly Implemented Security Check for Standard) is a common software weakness type identified by MITRE's CWE dictionary.

What is the difference between CVE and CWE?

CWE refers to the type of software weakness (root cause), while CVE refers to a specific instance of a vulnerability in a product.

Back to CWE Database

CWE-358

Improperly Implemented Security Check for Standard

Weakness Description

The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

Common Consequences

Access Control

Bypass Protection Mechanism

Related Weaknesses

CWE-573 CWE-693 CWE-345 CWE-290

Related Resources

Browse CWE Database

Explore 493 software weaknesses

CVE Database

Search 294,000+ vulnerabilities

Security Writeups

Learn from real-world examples

About 4nuxd

Cybersecurity research & tools

Get in touch for collaboration

Homepage

Explore more security resources