Detections
Analytics

GEN002640 - Default system accounts must be disabled or removed.

Information

Vendor accounts and software may contain backdoors allowing unauthorized access to the system. These backdoors are common knowledge and present a threat to system security if the account is not disabled.

Solution

Lock the default system account(s).
# chuser account_locked=true <user>

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5e., CAT|II, CCI|CCI-000178, Group-ID|V-810, Rule-ID|SV-38897r1_rule, STIG-ID|GEN002640, Vuln-ID|V-810

Plugin: Unix

Control ID: 00d5479ee19d083cb22cd65088ef7271e301e3ab13857493d80d412233609458