Detections
Analytics
ESXI-70-000015 - The ESXi host Secure Shell (SSH) daemon must not allow authentication using an empty password.
Information
Configuring this setting for the SSH daemon provides additional assurance that remote logon via SSH will require a password, even in the event of misconfiguration elsewhere.Solution
From an ESXi shell, add or correct the following line in '/etc/ssh/sshd_config':PermitEmptyPasswords no
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_7-0_Y25M04_STIG.zip
Item Details
Audit Name: DISA VMware vSphere 7.0 ESXi STIG v1r4 Unix
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-256387r959010_rule, STIG-ID|ESXI-70-000015, Vuln-ID|V-256387
Plugin: Unix
Control ID: 54d517664715a90364836283bd9d450dc582f91467d40659057fc87d1682756f