CWE-263 Password Aging with Long Expiration

base

The product supports password aging, but the expiration period is too long.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-1976UShigh8.8—
Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.
CVE-2011-4287USmedium6.8—
admin/uploaduser_form.php in Moodle 2.0.x before 2.0.3 does not force password changes for autosubscribed users, which makes it easier for remote attackers to obtain access by leve…
03

attack patterns (12)

CAPEC attack patterns that exploit this.

04

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan