Item Search

NameAudit NamePluginCategory
ALMA-09-037750 - AlmaLinux OS 9 must not have any File Transfer Protocol (FTP) packages installed.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

IDENTIFICATION AND AUTHENTICATION

ALMA-09-037860 - AlmaLinux OS 9 must not have any telnet packages installed.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

IDENTIFICATION AND AUTHENTICATION

APPL-11-002038 - Apple macOS must be configured to disable the tftp service.DISA STIG Apple macOS 11 v1r5Unix

IDENTIFICATION AND AUTHENTICATION

APPL-11-002038 - Apple macOS must be configured to disable the tftp service.DISA STIG Apple macOS 11 v1r8Unix

IDENTIFICATION AND AUTHENTICATION

APPL-12-002038 - The macOS system must be configured to disable the tftp service.DISA STIG Apple macOS 12 v1r9Unix

IDENTIFICATION AND AUTHENTICATION

APPL-13-002038 - The macOS system must be configured to disable the "tftp" service.DISA STIG Apple macOS 13 v1r5Unix

IDENTIFICATION AND AUTHENTICATION

ARBA-ND-000259 - AOS must transmit only encrypted representations of passwords.DISA HPE Aruba Networking AOS NDM STIG v1r1ArubaOS

IDENTIFICATION AND AUTHENTICATION

CD12-00-000800 - If passwords are used for authentication, PostgreSQL must transmit only encrypted representations of passwords.DISA STIG Crunchy Data PostgreSQL OS v3r1Unix

IDENTIFICATION AND AUTHENTICATION

CD16-00-003800 - If passwords are used for authentication, PostgreSQL must store only hashed, salted representations of passwords.DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDBPostgreSQLDB

IDENTIFICATION AND AUTHENTICATION

CD16-00-003900 - If passwords are used for authentication, PostgreSQL must transmit only encrypted representations of passwords.DISA Crunchy Data Postgres 16 STIG v1r3 UnixUnix

IDENTIFICATION AND AUTHENTICATION

EPAS-00-004400 - If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.EnterpriseDB PostgreSQL Advanced Server OS Linux v2r1Unix

IDENTIFICATION AND AUTHENTICATION

FGFW-ND-000245 - The FortiGate device must use LDAPS for the LDAP connection.DISA Fortigate Firewall NDM STIG v1r4FortiGate

IDENTIFICATION AND AUTHENTICATION

GEN000595 - Password hashes must have been generated using a FIPS 140-2 hashing algorithm - 'no password hashes in /etc/security/passwd'DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN000595 - The password hashes must have been generated using a FIPS 140-2 approved cryptographic hashing algorithm - '/etc/passwd'DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

IDENTIFICATION AND AUTHENTICATION

GEN008050 - If using LDAP for authentication or account information, the /etc/ldap.conf file (or equivalent) must not contain passwords.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

IDENTIFICATION AND AUTHENTICATION

IBMW-LS-000450 - The WebSphere Liberty Server must use TLS-enabled LDAP.DISA IBM WebSphere Liberty Server STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

IBMW-LS-000450 - The WebSphere Liberty Server must use TLS-enabled LDAP.DISA IBM WebSphere Liberty Server STIG v2r4Unix

IDENTIFICATION AND AUTHENTICATION

MADB-10-003900 - If passwords are used for authentication, MariaDB must transmit only encrypted representations of passwords.DISA MariaDB Enterprise 10.x STIG v2r5 MySQLDBMySQLDB

IDENTIFICATION AND AUTHENTICATION

MD4X-00-003000 - If passwords are used for authentication, MongoDB must store only hashed, salted representations of passwords.DISA STIG MongoDB Enterprise Advanced 4.x v1r4 OSUnix

IDENTIFICATION AND AUTHENTICATION

MD7X-00-003800 - If passwords are used for authentication, MongoDB must store only hashed, salted representations of passwords.DISA MongoDB Enterprise Advanced 7.x STIG v1r2 UnixUnix

IDENTIFICATION AND AUTHENTICATION

Monterey - Disable Trivial File Tansfer Protocol ServiceNIST macOS Monterey v1.0.0 - 800-53r5 LowUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

MYS8-00-005200 - If passwords are used for authentication, the MySQL Database Server 8.0 must transmit only encrypted representations of passwords.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

IDENTIFICATION AND AUTHENTICATION

O19C-00-014800 - Oracle Database must, for password-based authentication, store passwords using an approved salted key derivation function, preferably using a keyed hash.DISA Oracle Database 19c STIG v1r5 OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

O19C-00-014800 - Oracle Database must, for password-based authentication, store passwords using an approved salted key derivation function, preferably using a keyed hash.DISA Oracle Database 19c STIG v1r3 OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

O19C-00-014900 - If passwords are used for authentication, the Oracle Database must transmit only encrypted representations of passwords.DISA Oracle Database 19c STIG v1r5 UnixUnix

IDENTIFICATION AND AUTHENTICATION

O19C-00-014900 - If passwords are used for authentication, the Oracle Database must transmit only encrypted representations of passwords.DISA Oracle Database 19c STIG v1r5 WindowsWindows

IDENTIFICATION AND AUTHENTICATION

O19C-00-014900 - If passwords are used for authentication, the Oracle Database must transmit only encrypted representations of passwords.DISA Oracle Database 19c STIG v1r3 UnixUnix

IDENTIFICATION AND AUTHENTICATION

O19C-00-014900 - If passwords are used for authentication, the Oracle Database must transmit only encrypted representations of passwords.DISA Oracle Database 19c STIG v1r3 WindowsWindows

IDENTIFICATION AND AUTHENTICATION

PHTN-30-000025 - The Photon operating system must store only encrypted representations of passwords.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-30-000117 - The Photon operating system must store only encrypted representations of passwords.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-40-000040 - The Photon operating system must not have the telnet package installed.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-67-000025 - The Photon operating system must store only encrypted representations of passwords.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-67-000026 - The Photon operating system must store only encrypted representations of passwords.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-07-010199 - The Red Hat Enterprise Linux operating system must be configured to prevent overwriting of custom authentication configuration settings by the authconfig utility.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-10-200070 - RHEL 10 must not have the "tftp" package installed.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-10-800310 - RHEL 10 must be configured to operate in secure mode if the Trivial File Transfer Protocol (TFTP) server service is required.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611050 - SLEM 5 must configure the Linux Pluggable Authentication Modules (PAM) to only store encrypted representations of passwords.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SQL2-00-018600 - SQL Server must enforce password encryption for storage.DISA STIG SQL Server 2012 DB Instance Security v1r20MS_SQLDB

IDENTIFICATION AND AUTHENTICATION

SQLI-22-008200 - If passwords are used for authentication, SQL Server must transmit only encrypted representations of passwords.DISA Microsoft SQL Server 2022 Instance STIG v1r4 MS_SQLDBMS_SQLDB

IDENTIFICATION AND AUTHENTICATION

SYMP-NM-000260 - Symantec ProxySG must transmit only encrypted representations of passwords - HTTP-Console DisabledDISA Symantec ProxySG Benchmark NDM v1r2BlueCoat

IDENTIFICATION AND AUTHENTICATION

SYMP-NM-000260 - Symantec ProxySG must transmit only encrypted representations of passwords.DISA Symantec ProxySG Benchmark NDM v1r2BlueCoat

IDENTIFICATION AND AUTHENTICATION

UBTU-20-010405 - The Ubuntu operating system must not have the telnet package installed.DISA Canonical Ubuntu 20.04 LTS STIG v2r4Unix

IDENTIFICATION AND AUTHENTICATION

UBTU-22-215035 - Ubuntu 22.04 LTS must not have the "telnet" package installed.DISA Canonical Ubuntu 22.04 LTS STIG v2r9Unix

IDENTIFICATION AND AUTHENTICATION

UBTU-24-100030 - Ubuntu 24.04 LTS must not have the telnet package installed.DISA Canonical Ubuntu 24.04 LTS STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

VCPG-67-000013 - VMware Postgres must be configured to use TLS.DISA STIG VMware vSphere 6.7 PostgreSQL v1r2Unix

IDENTIFICATION AND AUTHENTICATION

VCPG-70-000010 - The vPostgres database must use 'md5' for authentication.DISA STIG VMware vSphere 7.0 PostgreSQL v1r2Unix

IDENTIFICATION AND AUTHENTICATION

WN11-SO-000110 - Unencrypted passwords must not be sent to third-party SMB Servers.DISA Microsoft Windows 11 STIG v2r9Windows

IDENTIFICATION AND AUTHENTICATION

WN22-SO-000180 - Windows Server 2022 unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers.DISA Microsoft Windows Server 2022 STIG v2r10Windows

IDENTIFICATION AND AUTHENTICATION

WN22-SO-000180 - Windows Server 2022 unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN25-SO-000180 - Windows Server 2025 unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers.DISA Microsoft Windows Server 2025 STIG v1r3Windows

IDENTIFICATION AND AUTHENTICATION