                foreach ($rolePermissions as $rolePermission => $value) {
                    // Strip the '*' off the start of the permission.
                    $checkPermission = substr($permission, 1);

                    // We will make sure that the merged permission does not
                    // exactly match our permission, but ends with it.
                    if ($checkPermission != $rolePermission && ends_with($rolePermission, $checkPermission) && $value === 1) {
                        $matched = true;
                        break;
                    }
                }
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.