概览
CWE-263(Password Aging with Long Expiration)描述一种在漏洞数据库与安全评估中使用的弱点类型;定义、背景与映射 CVE 见下方各节。
- 安全影响
- 安全影响:因产品与场景而异;请结合 CVE 记录、严重度评分与 MITRE 说明进行优先级判断。
描述
The product supports password aging, but the expiration period is too long.
适用平台
| 类型 |
名称 |
类 |
普遍性 |
OS / CPE |
| language |
— |
Not Language-Specific |
Undetermined |
本库相关 CVE
下列 CVE 在本库中映射到该弱点,并保留以便追溯与检索。
| CVE |
公开时间 |
摘要 |
| CVE-2023-1976 |
2023-04-11 |
Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6. |
曾用名
-
Allowing Unchecked Password Aging
(2008-04-11)
内容提交
- 名称
- CLASP
- 日期
- 2006-07-19
- 版本
- Draft 3
内容修订
| 日期 |
名称 |
版本 |
重要性 |
评论 |
| 2008-09-08 |
CWE Content Team |
1.0 |
— |
| 2011-03-29 |
CWE Content Team |
1.12 |
— |
| 2011-06-01 |
CWE Content Team |
1.13 |
— |
| 2011-06-27 |
CWE Content Team |
2.0 |
— |
| 2012-05-11 |
CWE Content Team |
2.2 |
— |
| 2014-07-30 |
CWE Content Team |
2.8 |
— |
| 2017-11-08 |
CWE Content Team |
3.0 |
— |
| 2020-02-24 |
CWE Content Team |
4.0 |
— |
| 2020-08-20 |
CWE Content Team |
4.2 |
— |
| 2022-10-13 |
CWE Content Team |
4.9 |
— |
| 2023-04-27 |
CWE Content Team |
4.11 |
— |
| 2023-06-29 |
CWE Content Team |
4.12 |
— |
| 2025-09-09 |
CWE Content Team |
4.18 |
— |
| 2025-12-11 |
CWE Content Team |
4.19 |
— |
贡献
| 类型 |
名称 |
日期 |
评论 |
| Feedback |
Kurt Seifried, Chris Eng, G. Ann Campbell, Larry Shields, Jeffrey Walton, Jason Dryhurst-Smith, and other members of the CWE Community |
2021-12-03 |
| Feedback |
Camille Gouttebroze |
2025-03-17 |
cvelogic
Threat Intelligence