CWE-521 弱口令要求 类漏洞列表 119

CWE-521 弱口令要求 类弱点 119 条 CVE 漏洞汇总，含 AI 中文分析。

常见影响 (1)

Access Control Gain Privileges or Assume Identity

An attacker could easily guess user passwords and gain access user accounts.

缓解措施 (4)

Architecture and Design A product's design should require adherance to an appropriate password policy. Specific password requirements depend strongly on contextual factors, but it is recommended to contain the following attributes: Enforcement of a minimum and maximum length Restrictions against password reuse Restrictions against using common passwords Restrictions against using contextual string in the password (e.g., …

Architecture and Design Consider a second authentication factor beyond the password, which prevents the password from being a single point of failure. See CWE-308 for further information.

Implementation Consider implementing a password complexity meter to inform users when a chosen password meets the required attributes.

Implementation Previously, "password expiration" was widely advocated as a defense-in-depth approach to minimize the risk of weak passwords, and it has become a common practice. Password expiration requires a password to be changed within a fixed time window (such as every 90 days). However, this approach has significant limitations in the current threat landscape, and…

Effectiveness: Discouraged Common Practice