View Categories

Password Policy: Password Question Requirement Set To None

Impact Area

Security

Severity

Medium

Affected Element

Profile

Rule ID #

SF-0114

Impact #

Setting the password hint answer requirement to None allows the user to use the password itself as the answer to this question.

Remediation #

Use the setting DoesNotContainPassword.

Time to fix 

30 min

References #

This rule is linked to Common Weakness Enumeration CWE-521 Weak Password Requirements.

Powered by BetterDocs