Detections
Analytics
ESXI-70-000015 - The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.Solution
From an ESXi shell, add or correct the following line in '/etc/ssh/sshd_config':PermitEmptyPasswords no
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_7-0_Y25M01_STIG.zip
Item Details
Audit Name: DISA STIG VMware vSphere 7.0 ESXi OS v1r3
References: CAT|III, CCI|CCI-000366, Rule-ID|SV-256387r959010_rule, STIG-ID|ESXI-70-000015, Vuln-ID|V-256387
Plugin: Unix
Control ID: 0870fd3023899acff7acacd7aae7e1379e0f34149e1869501930bfc00c167434