CME-802
Password Quality Enforcement (pwquality)
Description
Enforces minimum password complexity (length, character classes, dictionary checks) via pam_pwquality, making brute force and dictionary attacks impractical.
CVSS Vector Impacts
| Metric | Transition | Rationale |
|---|---|---|
| Attack Complexity (AC) | L → H | Password brute force requires significantly more time/resources |
CWE Relationships
Verification
Check pwquality configuration
$ grep -E 'minlen|minclass|dcredit' /etc/security/pwquality.conf
# Expected: minlen = 14
# Expected: minlen = 14
Platform: rhel