It was found that the password policy does not require uppercase characters. Without uppercase characters, the password is weaker and much easier to crack.
Recommended Mitigation
It is recommended to enforce passwords to contain at least one uppercase character.