Table of Contents
Impact Area
Security
Severity
Medium
Affected Element
Profile
Rule ID #
SF-0108
Impact #
Weak password expiration policies can open you up to brute force and dictionary attacks. Non-expiring passwords are unsafe.
Remediation #
Modify the password expiration time to ninety days or less.
Time to fix
30 min
References #
This rule is linked to Common Weakness Enumeration CWE-521 Weak Password Requirements.
