Detections
Analytics

CCI|CCI-001682

Title

The information system automatically removes or disables emergency accounts after an organization-defined time period for each type of account.

Reference Item Details

Category: 2011

Audit Items

View all Reference Audit Items

NamePluginAudit Name
AIX7-00-001014 - The AIX system must automatically remove or disable emergency accounts after the crisis is resolved or 72 hours.UnixDISA STIG AIX 7.x v2r9
AOSX-13-000115 - The macOS system must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-000013 - The macOS system must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-000012 - The macOS system must automatically remove or disable temporary and emergency user accounts after 72 hours.UnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-11-000012 - The macOS system must automatically remove or disable temporary and emergency user accounts after 72 hours.UnixDISA STIG Apple macOS 11 v1r5
APPL-11-000012 - The macOS system must automatically remove or disable temporary and emergency user accounts after 72 hours.UnixDISA STIG Apple macOS 11 v1r8
APPL-12-000012 - The macOS system must automatically remove or disable temporary and emergency user accounts after 72 hours.UnixDISA STIG Apple macOS 12 v1r8
APPL-13-000012 - The macOS system must automatically remove or disable temporary and emergency user accounts after 72 hours.UnixDISA STIG Apple macOS 13 v1r3
Big Sur - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Catalina - Automatically Remove or Disable Emergency Accounts within 72 HoursUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Automatically Remove or Disable Emergency Accounts within 72 HoursUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Automatically Remove or Disable Emergency Accounts within 72 HoursUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Automatically Remove or Disable Emergency Accounts within 72 HoursUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Automatically Remove or Disable Emergency Accounts within 72 HoursUnixNIST macOS Catalina v1.5.0 - All Profiles
Catalina - Automatically Remove or Disable Emergency Accounts within 72 HoursUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Catalina v1.5.0 - All Profiles
ESXI-67-000001 - Access to the ESXi host must be limited by enabling Lockdown Mode.VMwareDISA STIG VMware vSphere 6.7 ESXi v1r3
ESXI-70-000001 - Access to the ESXi host must be limited by enabling lockdown mode.VMwareDISA STIG VMware vSphere 7.0 ESXi v1r2
F5BI-DM-000149 - The BIG-IP appliance must be configured to automatically remove or disable emergency accounts after 72 hours.F5DISA F5 BIG-IP Device Management STIG v2r3
Monterey - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Monterey v1.0.0 - 800-53r4 Moderate
Monterey - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Monterey v1.0.0 - 800-53r4 High
Monterey - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Monterey v1.0.0 - 800-53r5 Moderate
Monterey - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Monterey v1.0.0 - 800-53r5 High
Monterey - Automatically Remove or Disable Temporary or Emergency User Accounts within 72 HoursUnixNIST macOS Monterey v1.0.0 - All Profiles
OL6-00-000298 - Emergency accounts must be provisioned with an expiration date.UnixDISA STIG Oracle Linux 6 v2r7
OL07-00-010271 - The Oracle Linux operating system must automatically expire temporary accounts within 72 hours.UnixDISA Oracle Linux 7 STIG v2r14
OL08-00-020270 - OL 8 must automatically expire temporary accounts within 72 hours.UnixDISA Oracle Linux 8 STIG v1r8
RHEL-06-000298 - Emergency accounts must be provisioned with an expiration date.UnixDISA Red Hat Enterprise Linux 6 STIG v2r2
RHEL-07-010271 - The Red Hat Enterprise Linux operating system must automatically expire temporary accounts within 72 hours.UnixDISA Red Hat Enterprise Linux 7 STIG v3r14
RHEL-08-020270 - RHEL 8 must automatically expire temporary accounts within 72 hours.UnixDISA Red Hat Enterprise Linux 8 STIG v1r13
RHEL-09-411040 - RHEL 9 must automatically expire temporary accounts within 72 hours.UnixDISA Red Hat Enterprise Linux 9 STIG v1r2
SLES-12-010330 - The SUSE operating system must never automatically remove or disable emergency administrator accounts.UnixDISA SLES 12 STIG v2r13
SLES-12-010331 - The SUSE operating system must automatically expire temporary accounts within 72 hours.UnixDISA SLES 12 STIG v2r13
SLES-15-020060 - The SUSE operating system must never automatically remove or disable emergency administrator accounts.UnixDISA SLES 15 STIG v1r12
SLES-15-020061 - The SUSE operating system must automatically expire temporary accounts within 72 hours.UnixDISA SLES 15 STIG v1r12
UBTU-16-010200 - Emergency administrator accounts must never be automatically removed or disabled.UnixDISA STIG Ubuntu 16.04 LTS v2r3
UBTU-18-010447 - The Ubuntu operating system must automatically expire temporary accounts within 72 hours.UnixDISA STIG Ubuntu 18.04 LTS v2r13
UBTU-20-010410 - The Ubuntu operating system must automatically expire temporary accounts within 72 hours.UnixDISA STIG Ubuntu 20.04 LTS v1r10
VCSA-70-000059 - The vCenter Server must uniquely identify and authenticate users or processes acting on behalf of users.VMwareDISA STIG VMware vSphere 7.0 vCenter v1r2
WN12-GE-000057 - Windows 2012 / 2012 R2 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.WindowsDISA Windows Server 2012 and 2012 R2 MS STIG v3r7
WN12-GE-000057 - Windows 2012 / 2012 R2 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.WindowsDISA Windows Server 2012 and 2012 R2 DC STIG v3r7
WN16-00-000340 - Windows Server 2016 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.WindowsDISA Windows Server 2016 STIG v2r7
WN19-00-000310 - Windows Server 2019 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.WindowsDISA Windows Server 2019 STIG v2r8
WN22-00-000310 - Windows Server 2022 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.WindowsDISA Windows Server 2022 STIG v1r4