Security Technical Implementation Guides (STIGs)

Vulnerability ID	Severity	Description
V-220743	Medium	The maximum password age must be configured to 60 days or less.
V-254258	Medium	Windows Server 2022 passwords must be configured to expire
V-205658	Medium	Windows Server 2019 passwords must be configured to expire
V-253273	Medium	Accounts must be configured to require password expiration
V-220716	Medium	Accounts must be configured to require password expiration
V-260546	Medium	Ubuntu 22.04 LTS must enforce a 60-day maximum password lifetime restriction. Passwords for new u...
V-224820	Medium	Passwords for the built-in Administrator account must be changed at least every 60 days
V-224839	Medium	Passwords must be configured to expire
V-224870	Medium	Windows Server 2016 maximum password age must be configured to 60 days or less
V-254239	Medium	Windows Server 2022 passwords for the built-in Administrator account must be changed at least eve...
V-205657	Medium	Windows Server 2019 passwords for the built-in Administrator account must be changed at least eve...
V-253476	Medium	Passwords for enabled local Administrator accounts must be changed at least every 60 days
V-220952	Medium	Passwords for enabled local Administrator accounts must be changed at least every 60 days
V-268536	Medium	The macOS system must restrict maximum password lifetime to 60 days
V-277986	Medium	Windows Server 2025 passwords for the built-in Administrator account must be changed at least eve...
V-278005	Medium	Windows Server 2025 passwords must be configured to expire
V-278037	Medium	Windows Server 2025 maximum password age must be configured to 60 days or less
V-277145	Medium	The macOS system must restrict maximum password lifetime to 60 days