CWE Definition / CWE-1472

CWE-1472: Generation of Credential with Long Expiration

The product generates or relies on a credential such as a key, certificate, password, confirmation code, or token, but the credential does not expire or has an expiration that is too long, i.e., the expiration is insufficient for the intended security policy of the product.