CWE-263 1 个 CVE MITRE 定义 ↗

CWE-263:Password Aging with Long Expiration

概览

CWE-263(Password Aging with Long Expiration)描述一种在漏洞数据库与安全评估中使用的弱点类型;定义、背景与映射 CVE 见下方各节。

安全影响
安全影响:因产品与场景而异;请结合 CVE 记录、严重度评分与 MITRE 说明进行优先级判断。

描述

The product supports password aging, but the expiration period is too long.

适用平台

类型 名称 普遍性 OS / CPE
language Not Language-Specific Undetermined

本库相关 CVE

下列 CVE 在本库中映射到该弱点,并保留以便追溯与检索。

CVE 公开时间 摘要
CVE-2023-1976 2023-04-11 Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.

曾用名

  • Allowing Unchecked Password Aging (2008-04-11)

内容提交

名称
CLASP
日期
2006-07-19
版本
Draft 3

内容修订

日期 名称 版本 重要性 评论
2008-09-08 CWE Content Team 1.0 updated Common_Consequences, Relationships, Other_Notes, Taxonomy_Mappings
2011-03-29 CWE Content Team 1.12 updated Description, Other_Notes, Relationships
2011-06-01 CWE Content Team 1.13 updated Common_Consequences
2011-06-27 CWE Content Team 2.0 updated Common_Consequences
2012-05-11 CWE Content Team 2.2 updated References, Relationships
2014-07-30 CWE Content Team 2.8 updated Relationships
2017-11-08 CWE Content Team 3.0 updated Applicable_Platforms, Likelihood_of_Exploit, Modes_of_Introduction, Relationships
2020-02-24 CWE Content Team 4.0 updated Demonstrative_Examples, References
2020-08-20 CWE Content Team 4.2 updated Related_Attack_Patterns
2022-10-13 CWE Content Team 4.9 updated Description, Potential_Mitigations, References, Relationships
2023-04-27 CWE Content Team 4.11 updated References, Relationships
2023-06-29 CWE Content Team 4.12 updated Mapping_Notes
2025-09-09 CWE Content Team 4.18 updated Maintenance_Notes, Mapping_Notes, Potential_Mitigations, References
2025-12-11 CWE Content Team 4.19 updated Weakness_Ordinalities

贡献

类型 名称 日期 评论
Feedback Kurt Seifried, Chris Eng, G. Ann Campbell, Larry Shields, Jeffrey Walton, Jason Dryhurst-Smith, and other members of the CWE Community 2021-12-03 Gave feedback on how to update CWE-262 and CWE-263 due to changing password management practices
Feedback Camille Gouttebroze 2025-03-17 suggested removal of password expiration as an acceptable mitigation in CWE-521 and provided references
cvelogic Threat Intelligence