The application password policy does not enforce strong password requirements. Users could choose short or common passwords that can be discovered by executing a brute force attack.

New password requirements :

• Passwords must meet at least 3 out of the following 4 complexity rules.
  • At least 1 lowercase character (a-z)
  • At least 1 digit (0-9)
  • at least 1 special character (punctuation)
  • At least 1 uppercase character (A-Z)

• At least 10 characters

• At most 128 characters