CWE-358 - Improperly Implemented Security Check for Standard