CME-805
Credential Rotation Policy
Description
Automated rotation of secrets, API keys, and passwords on schedule. Limits the window during which compromised credentials remain valid.
CVSS Vector Impacts
| Metric | Transition | Rationale |
|---|---|---|
| Attack Complexity (AC) | L → H | Compromised credentials expire before attacker can use them |
CWE Relationships
Verification
Check password aging and secret rotation policies
$ chage -l <user> | grep 'Maximum'
# Expected: Maximum number of days between password change : 90
# Expected: Maximum number of days between password change : 90
Platform: linux