Detections
Analytics

1.49 ESXI-80-000222

Information

The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.

GROUP ID: V-258777
RULE ID: SV-258777r959010

Warnings that local or remote shell sessions are enabled alert administrators to activity they may not be aware of and need to investigate.

Solution

From the vSphere Client, go to Hosts and Clusters.

Select the ESXi Host >> Configure >> System >> Advanced System Settings.

Click "Edit". Select the "UserVars.SuppressShellWarning" value and configure it to "0".

or

From a PowerCLI command prompt while connected to the ESXi host, run the following command:

Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Set-AdvancedSetting -Value 0

See Also

https://workbench.cisecurity.org/benchmarks/23619

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258777r959010_rule, STIG-ID|ESXI-80-000222, Vuln-ID|V-258777

Plugin: VMware

Control ID: 1c834741a97142db33db5dbec653a468c0f6d510d807acf39faf5d3cbcf028ec