CWE-263Base

Password Aging with Long Expiration

Draft in the CWE catalog · 1 CVE mapped

1
CVEs mapped
4.6
Median CVSS
What it is

The product supports password aging, but the expiration period is too long.

Recent examples
4.6cvss
CVE-2023-1976

Password Aging with Long Expiration in answerdev/answer

Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.

MEDIUMno explanation yet
1%
epss
The record
Technical detail
CWE ID
CWE-263
Abstraction
Base
Structure
Simple
Status
Draft
References (10)
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63B-4.pdfhttps://assets.publishing.service.gov.uk/media/5a806bb9e5274a2e87db9b6a/Password_guidance_-_simplifying_your_approach.pdfhttps://cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdfhttps://www.mail-archive.com/[email protected]/msg00018.htmlhttps://www.sans.org/blog/time-for-password-expiration-to-die/https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2016/03/time-rethink-mandatory-password-changeshttps://www.cerias.purdue.edu/site/blog/post/password-change-myths/https://www.ncsc.gov.uk/collection/passwordshttps://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdfhttps://webarchive.nationalarchives.gov.uk/ukgwa/20240701101110/https://www.ncsc.gov.uk/blog-post/let-them-paste-passwords