CWE-262: Not Using Password Aging

Base Draft Simple

CWE版本: 4.18

更新日期: 2025-09-09

弱点描述

The product does not have a mechanism in place for managing password aging.

常见后果

影响范围: Access Control

技术影响: Gain Privileges or Assume Identity

说明: As passwords age, the probability that they are compromised grows.

潜在缓解措施

阶段: Architecture and Design

描述: As part of a product's design, require users to change their passwords regularly and avoid reusing previous passwords.

阶段: Implementation

描述: Developers might disable clipboard paste operations into password fields as a way to discourage users from pasting a password into a clipboard. However, this might encourage users to choose less-secure passwords that are easier to type, and it can reduce the usability of password managers [REF-1294].

有效性: Discouraged Common Practice

引入模式

阶段 说明
Architecture and Design COMMISSION: This weakness refers to an incorrect design related to an architectural security tactic.

适用平台

编程语言
Not Language-Specific (Undetermined)

分类映射

分类名称 条目ID 条目名称 映射适配度
CLASP - Not allowing password aging -
关键信息

CWE ID: CWE-262

抽象级别: Base

结构: Simple

状态: Draft

利用可能性: Low

相关弱点
相关攻击模式
CAPEC-16 CAPEC-49 CAPEC-509 CAPEC-55 CAPEC-555 CAPEC-560 CAPEC-561 CAPEC-565 CAPEC-600 CAPEC-652 CAPEC-653 CAPEC-70