Detections
Analytics

PHTN-40-000247 - The Photon operating system must not allow empty passwords.

Information

Accounts with empty or no passwords allow anyone to log on as that account without specifying a password or other forms of authentication. Allowing accounts with empty passwords puts the system at significant risk since only the username is required for access.

Solution

Navigate to and open:

/etc/pam.d/system-password or /etc/pam.d/system-auth

Remove the "nullok" argument on the "pam_unix.so" module line.

Note: On vCenter appliances, the equivalent file must be edited under "/etc/applmgmt/appliance", if one exists, for the changes to persist after a reboot.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y26M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-266063r1003661_rule, STIG-ID|PHTN-40-000247, Vuln-ID|V-266063

Plugin: Unix

Control ID: 913012341be5b55a14aad174906b06083a46295d12e3cc356f09867326d3aabf