cve.bz

CWE-263: Password Aging with Long Expiration

Filter

The product supports password aging, but the expiration period is too long.

What the weakness is: CWE-263 at MITRE. All weaknesses

Related attack patterns (CAPEC): 12
  • CAPEC-16 Dictionary-based Password Attack Likelihood: Medium · Severity: High
  • CAPEC-49 Password Brute Forcing Likelihood: Medium · Severity: High
  • CAPEC-55 Rainbow Table Password Cracking Likelihood: Medium · Severity: Medium
  • CAPEC-70 Try Common or Default Usernames and Passwords Likelihood: Medium · Severity: High
  • CAPEC-509 Kerberoasting Severity: High
  • CAPEC-555 Remote Services with Stolen Credentials Severity: Very High
  • CAPEC-560 Use of Known Domain Credentials Likelihood: High · Severity: High
  • CAPEC-561 Windows Admin Shares with Stolen Credentials
  • CAPEC-565 Password Spraying Likelihood: High · Severity: High
  • CAPEC-600 Credential Stuffing Likelihood: High · Severity: High
  • CAPEC-652 Use of Known Kerberos Credentials Likelihood: Medium · Severity: High
  • CAPEC-653 Use of Known Operating System Credentials Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-263, as MITRE names them. Credits.

Ask an AI about CWE-263

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-263: Password Aging with Long Expiration and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/263.html and https://cve.bz/cve/cwe/263?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2023-1976EPSS 0.6%

    Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.