Image Security Standards

Sellers are responsible for security vulnerabilities in their images, including any resulting consequences. The following table lists the specific standards.

Item	Standard
Virus	Images cannot contain viruses, Trojan horses, or malicious programs.
Host vulnerability	Images cannot contain high-risk vulnerabilities whose Common Vulnerability Scoring System (CVSS) score is 7.0 or higher.
Preset OS account, password, and key	Images cannot contain preset accounts, passwords, or keys for logging to the OS.
OS password complexity	A password for an image must meet the following complexity requirements: 1. At least eight characters 2. At least two types of the following characters: - Lowercase letters - Uppercase letters - Digits - Special characters: `~!@#$%^&*()-_=+\\|[{}];:'",<.>/? and spaces 3. Different from the account name