Sensitive Information Disclosure

etcd is vulnerable to sensitive information disclosure. Lack of password strength checking length, coexistence of numbers and alphabets, etc during the creation or updating of a user password allows an attacker to brute-force the password easily if an administrator does not enforce a requirement ...

Linux: minclass in pam_pwquality.so

The pampwquality module can be plugged into the password stack of a given service to provide some plug-in strength-checking for passwords. The code was originally based on pamcracklib module and the module is backwards compatible with its options. - minclass: The minimum number of required classe...