Detections
Analytics
AIX7-00-002120 - The AIX SSH daemon must be configured to disable empty passwords.
Information
When password authentication is allowed, PermitEmptyPasswords specifies whether the server allows login to accounts with empty password strings. If an account has an empty password, anyone could log in and run commands with the privileges of that account. Accounts with empty passwords should never be used in operational environments.Solution
Edit "/etc/ssh/sshd_config" and add or edit the "PermitEmptyPasswords " line as:PermitEmptyPasswords no
Save the change and restart ssh daemon:
# stopsrc -s sshd
# startsrc -s sshd
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215302r991591_rule, STIG-ID|AIX7-00-002120, STIG-Legacy|SV-101841, STIG-Legacy|V-91743, Vuln-ID|V-215302
Plugin: Unix
Control ID: 0e8f0435d4c21ed0cab73cc038e9adb8d9c766db441b3d062cf23d0531d8c9ed