Detections
Analytics

GEN002640 - Default system accounts must be disabled or removed.

Information

Vendor accounts and software may contain backdoors allowing unauthorized access to the system. These backdoors are common knowledge and present a threat to system security if the account is not disabled.

Solution

Lock the default system account(s).
# chuser account_locked=true <user>

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000178, Rule-ID|SV-38897r1_rule, STIG-ID|GEN002640, Vuln-ID|V-810

Plugin: Unix

Control ID: ebe41dcad28319fd7f8a016ff4e672b62aa1096ef097f777fd92079b26a31fbc