Access Control Flaw

A missing or incorrect permission check allowing unauthorized invocation of privileged functions. Consistently one of the highest-loss vulnerability classes.