CCI-000199
The information system enforces maximum password lifetime restrictions.
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
Authorization for access to the MQ Appliance network device must enforce a 60-day maximum password lifetime restriction.
1 rule found Severity: Medium
1 rule found Severity: Medium
If SQL Server authentication, using passwords, is employed, SQL Server must enforce the DoD standards for password lifetime.
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
Innoslate must use multifactor authentication for network access to privileged and non-privileged accounts.
1 rule found Severity: High
2 rules found Severity: Medium
2 rules found Severity: Medium
2 rules found Severity: Medium
The Ubuntu operating system must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
2 rules found Severity: Low
The Red Hat Enterprise Linux operating system must be configured so that passwords for new users are restricted to a 60-day maximum lifetime.
1 rule found Severity: Medium
The Red Hat Enterprise Linux operating system must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
4 rules found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
The Oracle Linux operating system must be configured so that passwords for new users are restricted to a 60-day maximum lifetime.
1 rule found Severity: Medium
The Oracle Linux operating system must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
1 rule found Severity: Medium
1 rule found Severity: Medium
Splunk Enterprise must enforce a 60-day maximum password lifetime restriction for the account of last resort.
1 rule found Severity: Low
1 rule found Severity: Low
The requirement for scheduled Solidcore client Command Line Interface (CLI) Access Password changes must be documented in the organizations written policy.
1 rule found Severity: Medium
1 rule found Severity: Medium
Ubuntu 22.04 LTS must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
1 rule found Severity: Medium
Passwords for existing users must have a 60-day maximum password lifetime restriction in /etc/shadow.
1 rule found Severity: Medium
Passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.
1 rule found Severity: Medium
Windows Server 2019 passwords for the built-in Administrator account must be changed at least every 60 days.
1 rule found Severity: Medium
1 rule found Severity: Medium
Windows Server 2022 passwords for the built-in Administrator account must be changed at least every 60 days.
1 rule found Severity: Medium
1 rule found Severity: Medium
Procedures for establishing temporary passwords that meet DOD password requirements for new accounts must be defined, documented, and implemented.
1 rule found Severity: Medium
Access to Prisma Cloud Compute must be managed based on user need and least privileged using external identity providers for authentication and grouping to role-based assignments when possible.
1 rule found Severity: Medium
1 rule found Severity: Medium
OL 8 user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
1 rule found Severity: Medium
1 rule found Severity: Medium
RHEL 8 user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
1 rule found Severity: Medium
RHEL 9 user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.
1 rule found Severity: Medium
1 rule found Severity: Medium
The SUSE operating system must be configured to create or update passwords with a maximum lifetime of 60 days.
2 rules found Severity: Medium
2 rules found Severity: Medium
The Photon operating system must be configured so that passwords for new users are restricted to a 90-day maximum lifetime.
1 rule found Severity: Medium
2 rules found Severity: Medium
1 rule found Severity: Medium
1 rule found Severity: Medium
Rancher MCM must use a centralized user management solution to support account management functions. For accounts using password authentication, the container platform must use FIPS-validated SHA-2 or later protocol to protect the integrity of the password authentication process.
1 rule found Severity: High