Detections
Analytics
VCTR-67-000010 - The vCenter Server must limit the use of the built-in SSO administrative account.
Information
Use of the SSO administrator account should be limited as it is a shared account and individual accounts must be used wherever possible.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Develop a policy to limit the use of the built-in SSO administrator account.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_Y23M07_STIG.zip
Item Details
Audit Name: DISA STIG VMware vSphere 6.7 vCenter v1r4
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-2(5), CAT|II, CCI|CCI-000770, Rule-ID|SV-243080r879594_rule, STIG-ID|VCTR-67-000010, Vuln-ID|V-243080
Plugin: VMware
Control ID: d224cb168e835cf3690ccc07be402230cb17e70095bca0ce04e42d2827af9353