CWE-638: Not Using Complete Mediation
The product does not perform access checks on a resource every time the resource is accessed by an entity, which can create resultant weaknesses if that entity's rights or privileges change over time.
A kind of CWE-657 Violation of Secure Design Principles.
From the CWE List. © The MITRE Corporation.