Detections
Analytics
WN08-00-000010-01 - Application account passwords must be at least 15 characters in length.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Application/service account passwords must be of sufficient length to prevent being easily cracked. Application/service accounts that are manually managed must have passwords at least 15 characters in length.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Establish a site policy that defines the requirements for application/service account length. Create application/service account passwords that are at least 15 characters in length.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_8_and_8-1_V1R23_STIG.zip
Item Details
Audit Name: DISA Windows 8/8.1 STIG v1r23
References: CAT|II, CCI|CCI-000205, Rule-ID|SV-48278r2_rule, STIG-ID|WN08-00-000010-01, Vuln-ID|V-36661
Plugin: Windows
Control ID: 559d7cdd055924848dd56f57458d4c0b6b2322ecd4b88f8b62d6e13b4b5e23d4