Detections
Analytics

1.83 SOL-11.1-040120

Information

The system must not have accounts configured with blank or null passwords.

GROUP ID: V-216097RULE ID: SV-216097r959010

Complex passwords can reduce the likelihood of success of automated password-guessing attacks.

Solution

The root role is required.

Remove, lock, or configure a password for any account with a blank password.

passwd [username]orUse the passwd -l command to lock accounts that are not permitted to execute commands.orUse the passwd -N command to set accounts to be non-login.

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216097r959010_rule, STIG-ID|SOL-11.1-040120, Vuln-ID|V-216097

Plugin: Unix

Control ID: fd458302b7b724700976ec426138625ab6a0773b3c9f7e2dbbc99d6177a12445