Detections
Analytics

CSCv7|3.3

Title

Protect Dedicated Assessment Accounts

Description

Use a dedicated account for authenticated vulnerability scans, which should not be used for any other administrative activities and should be tied to specific machines at specific IP addresses.

Reference Item Details

Category: Continuous Vulnerability Management

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1.1 Ensure mounting of udf filesystems is disabledUnixCIS Google Container-Optimized OS v1.2.0 L2 Server
2.2.5 (L1) Ensure 'Allow local file access to file:// URLs on these sites in the PDF Viewer' Is DisabledWindowsCIS Google Chrome L1 v3.0.0
2.3.4 (L2) Ensure 'Default third-party storage partitioning setting' Is Enabled and BlockedWindowsCIS Google Chrome L2 v3.0.0
4.1.1.10 Ensure access on /var/adm/cron/at.allow is configuredUnixCIS IBM AIX 7 v1.0.0 L1
5.1 Use secure RealmsUnixCIS Apache Tomcat 10 L2 v1.1.0 Middleware
5.1 Use secure RealmsUnixCIS Apache Tomcat 9 L2 v1.2.0
5.1 Use secure RealmsUnixCIS Apache Tomcat 9 L2 v1.2.0 Middleware
5.1 Use secure RealmsUnixCIS Apache Tomcat 10 L2 v1.1.0