Account Server 3.11 Release Notes
Account Server 3.11 build tries to address internal audit related vulnerabilities that were discovered.
Vulnerability
It was discovered that the current password policy which promotes password should be 8-character long alphanumeric and must contain at least one of ! @ # $ & special characters, is more susceptible to brute force attack.
Fix
The password policy has been revised to: password should be 10-character long alphanumeric
and must contain at least one of ! @ # $ & special characters.