CWE-263
Password Aging with Long Expiration
The product supports password aging, but the expiration period is too long.
Impactr finds and proves whether CWE-263 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.