Detections
Analytics

1.173 WN11-CC-000330

Information

The Windows Remote Management (WinRM) client must not use Basic authentication.

GROUP ID: V-253416
RULE ID: SV-253416r958510

Basic authentication uses plain text passwords that could be used to compromise a system.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Windows Remote Management (WinRM) >> WinRM Client >> 'Allow Basic authentication'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: MAINTENANCE

References: 800-53|MA-4c., CCI|CCI-000877, Rule-ID|SV-253416r958510_rule, STIG-ID|WN11-CC-000330, Vuln-ID|V-253416

Plugin: Windows

Control ID: 289068d185ba0635814bbd19cde06d39eb2e9acc1fbc7dbe91058d7dffcf7a74