General Information

Weak Password Policy

Variants:
Direct 

Vector Type:
Vulnerability

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Change Password

Invented In:
01/01/1999

Added In:
23/12/2014


Vector Operation Method:
The password policy enforced in the change password feature or the currently used user account is insecure.


Direct Variant:

Weak Password Policy

Variant Title:
Weak Password Policy

Typical Severity:
Medium

Learn More: