GEN000595 - The password hashes stored on the system must have been generated using a FIPS 140-2 approved cryptographic hashing algorithm - '/etc/passwd'

Information

Systems must employ cryptographic hashes for passwords using the SHA-2 family of algorithms or FIPS 140-2 approved successors. The use of unapproved algorithms may result in weak password hashes more vulnerable to compromise.

Solution

Change the passwords for all accounts using non-compliant password hashes.

(This requires GEN000590 is already met.)

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V2R1_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(c), CAT|II, CCI|CCI-000196, Rule-ID|SV-218230r603259_rule, STIG-ID|GEN000595, STIG-Legacy|SV-63949, STIG-Legacy|V-22304, Vuln-ID|V-218230

Plugin: Unix

Control ID: 42ad051cba8ac904ffbf605eea0bced7c4c90f20a54af88bfc1241819e7e5f9d