Common Weakness Enumeration
CWE-263 Password Aging with Long Expiration
Description
The product supports password aging, but the expiration period is too long.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-263 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-j3x5-cwfj-pfcw | CVE-2011-4287 | MODERATE | - |
Moodle does not force password changes for autosubscribed users |
2025-04-12 |
| GHSA-j97g-77fj-9c4p | CVE-2023-1976 | HIGH |
Answer vulnerable to account takeover because password reset links do not expire |
2023-04-21 |