CWE-262 Not Using Password Aging
baseThe product does not have a mechanism in place for managing password aging.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (8)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-22767US | high8.8OT elevated | — | ||
Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are inst… | ||||
| CVE-2012-3020US | high7.5 | — | ||
The Siemens Synco OZW Web Server devices OZW672.*, OZW772.*, and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to o… | ||||
| CVE-2023-1555US | medium4.3 | — | ||
An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 befor… | ||||
| CVE-2023-2022US | medium4.3 | — | ||
An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16… | ||||
| CVE-2012-1964US | medium4.0 | — | ||
The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.6, Thunderbird… | ||||
| CVE-2026-50101US | — | — | ||
Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each boot. Because this credential remains valid indefinitely an… | ||||
| CVE-2025-60010US | — | — | ||
A password aging vulnerability in the RADIUS client of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to access the device without e… | ||||
| CVE-2025-58435US | — | — | ||
Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than v… | ||||
03
attack patterns (12)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan