CCI-000198
The information system enforces minimum password lifetime restrictions.
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
If SQL Server authentication, using passwords, is employed, SQL Server must enforce the DoD standards for password lifetime.
1 rule found Severity: Medium
1 rule found Severity: Medium
Innoslate must use multifactor authentication for network access to privileged and non-privileged accounts.
1 rule found Severity: High
1 rule found Severity: Medium
The Ubuntu operating system must enforce 24 hours/1 day as the minimum password lifetime. Passwords for new users must have a 24 hours/1 day minimum password lifetime restriction.
2 rules found Severity: Low
The Red Hat Enterprise Linux operating system must be configured so that passwords for new users are restricted to a 24 hours/1 day minimum lifetime.
1 rule found Severity: Medium
The Red Hat Enterprise Linux operating system must be configured so that passwords are restricted to a 24 hours/1 day minimum lifetime.
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
The Oracle Linux operating system must be configured so that passwords for new users are restricted to a 24 hours/1 day minimum lifetime.
1 rule found Severity: Medium
The Oracle Linux operating system must be configured so that passwords are restricted to a 24 hours/1 day minimum lifetime.
1 rule found Severity: Medium
1 rule found Severity: Medium
SLEM 5 must be configured to create or update passwords with a minimum lifetime of 24 hours (one day).
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
Ubuntu 22.04 LTS must enforce 24 hours/one day as the minimum password lifetime. Passwords for new users must have a 24 hours/one day minimum password lifetime restriction.
1 rule found Severity: Medium
Passwords for existing users must have a 24-hour minimum password lifetime restriction in /etc/shadow.
1 rule found Severity: Medium
Passwords for new users or password changes must have a 24-hour minimum password lifetime restriction in /etc/login.defs.
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
Access to Prisma Cloud Compute must be managed based on user need and least privileged using external identity providers for authentication and grouping to role-based assignments when possible.
1 rule found Severity: Medium
OL 8 passwords for new users or password changes must have a 24 hours/one day minimum password lifetime restriction in "/etc/shadow".
1 rule found Severity: Medium
OL 8 passwords for new users or password changes must have a 24 hours/one day minimum password lifetime restriction in "/etc/login.defs".
1 rule found Severity: Medium
1 rule found Severity: Medium
RHEL 8 passwords for new users or password changes must have a 24 hours/1 day minimum password lifetime restriction in /etc/login.defs.
1 rule found Severity: Medium
RHEL 9 passwords for new users or password changes must have a 24 hours minimum password lifetime restriction in /etc/login.defs.
1 rule found Severity: Medium
1 rule found Severity: Medium
The SUSE operating system must be configured to create or update passwords with a minimum lifetime of 24 hours (one day).
2 rules found Severity: Medium
2 rules found Severity: Medium
2 rules found Severity: Medium
The Photon operating system must be configured so that passwords for new users are restricted to a 24-hour minimum lifetime.
1 rule found Severity: Medium
1 rule found Severity: Medium
Rancher MCM must use a centralized user management solution to support account management functions. For accounts using password authentication, the container platform must use FIPS-validated SHA-2 or later protocol to protect the integrity of the password authentication process.
1 rule found Severity: High