001_0004 - StrongPasswordPolicy
Strong password policy
Ensure minimum password length of at least 8 characters and must use all character classes.
Metadata
authors:
- Xiwen Cheng <x@cinaq.com>
category: Security
input: .*Security\$ProjectSecurity\.yaml
priority: 5
rulename: StrongPasswordPolicy
rulenumber: '001_0004'
scope: package
severity: HIGH
Description
Bruteforce is quite common. Ensure passwords are very strong.
Remediation
Ensure minimum password length of at least 8 characters and must use all character classes.