CWE-358: Improperly Implemented Security Check for Standard

What is CWE-358?

CWE-358 is Improperly Implemented Security Check for Standard. The flaw arises when the product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique. The database currently holds 17 vulnerabilities mapped to CWE-358 and none of them are in the CISA Known Exploited Vulnerabilities catalog.

Analyzing data...

OWASP Top 10 Rank-
Related CVES (365 days)17
AbstractionBase
Likelihood of exploit-

Vulnerabilities mapped to CWE-358

17 vulnerabilities89% increase year over year

No data

No vulnerability data in CISA KEV for CWE-358

Official definition

ByMitre CWE

The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

Characteristics

Modes of introduction

  • Architecture and Design
  • Implementation: This is an implementation error, in which the algorithm/technique requires certain security-related behaviors or conditions that are not implemented or checked properly, thus causing a vulnerability.

Common consequences

ImpactScopeExplanation
Bypass Protection MechanismAccess Control-

Representative vulnerabilities

Sources (2)

CWE™ Program, operated by The MITRE Corporation. Copyright © 2006–2026, The MITRE Corporation. The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. CWE Terms of Use.

Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.