CWE-262: Not Using Password Aging
The product does not have a mechanism in place for managing password aging.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- naxclow ix cam, smart doorbell x3, v720 +1 more +3 more Naxclow IoT Platform Not using password aging 9.2 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: Device allows login for user with expired password 5.3 Medium
- osc ondemand Open OnDemand didn't rotate password for VNC batch_connect 4.1 Medium
- gitlab Missing Authorization in GitLab 2.7 Low
- gitlab Missing Authorization in GitLab 4.3 Medium
- bd pyxis anesthesia station es firmware, pyxis ciisafe firmware, pyxis logistics firmware +29 more +31 more BD Pyxis™ Products – Default Credentials 8.8 High