CWE-262 6 個 CVE MITRE 定義 ↗

CWE-262：Not Using Password Aging

概覽

CWE-262（Not Using Password Aging）描述一種在漏洞資料庫與安全評估中使用的弱點類型；定義、背景與對應 CVE 見下方各節。

安全影響
安全影響：因產品與情境而異；請結合 CVE 紀錄、嚴重度評分與 MITRE 說明進行優先級判斷。

描述

The product does not have a mechanism in place for managing password aging.

適用平台

類型 名稱 類 普遍性 OS / CPE
language — Not Language-Specific Undetermined —

本庫相關 CVE

下列 CVE 在本庫中對應到該弱點，並保留以便追溯與檢索。

CVE 公開時間 摘要
CVE-2026-50101 2026-06-12 Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each boot. Because this credential remains valid indefinitely and cannot be reset or…
CVE-2025-60010 2025-10-09 A password aging vulnerability in the RADIUS client of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to access the device without enforcing the require…
CVE-2025-58435 2025-09-09 Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The li…
CVE-2023-1555 2023-09-01 An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A namespac…
CVE-2023-2022 2023-08-02 An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2, which leads to…
CVE-2022-22767 2022-06-02 Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are installed with the same …

曾用名

  • Not Allowing Password Aging (2008-04-11)

內容提交

名稱
CLASP
日期
2006-07-19
版本
Draft 3

內容修訂

日期 名稱 版本 重要性 評論
2008-09-08 CWE Content Team 1.0 — updated Common_Consequences, Relationships, Other_Notes, Taxonomy_Mappings
2011-03-29 CWE Content Team 1.12 — updated Relationships
2011-06-01 CWE Content Team 1.13 — updated Common_Consequences
2011-06-27 CWE Content Team 2.0 — updated Common_Consequences
2012-05-11 CWE Content Team 2.2 — updated References, Relationships
2014-06-23 CWE Content Team 2.7 — updated Other_Notes, Potential_Mitigations
2014-07-30 CWE Content Team 2.8 — updated Relationships
2017-11-08 CWE Content Team 3.0 — updated Applicable_Platforms, Likelihood_of_Exploit, Modes_of_Introduction, Relationships
2020-02-24 CWE Content Team 4.0 — updated Demonstrative_Examples, Description, Potential_Mitigations, References, Type
2020-08-20 CWE Content Team 4.2 — updated Related_Attack_Patterns
2022-10-13 CWE Content Team 4.9 — updated Description, Potential_Mitigations, References, Relationships
2023-04-27 CWE Content Team 4.11 — updated References, Relationships
2023-06-29 CWE Content Team 4.12 — updated Mapping_Notes
2025-09-09 CWE Content Team 4.18 — updated References
2025-12-11 CWE Content Team 4.19 — updated Weakness_Ordinalities

貢獻

類型 名稱 日期 評論
Feedback Kurt Seifried, Chris Eng, G. Ann Campbell, Larry Shields, Jeffrey Walton, Jason Dryhurst-Smith, and other members of the CWE Community 2021-12-03 Gave feedback on how to update CWE-262 and CWE-263 due to changing password management practices
cvelogic Threat Intelligence