Default passwords must be changed.
An XCCDF Rule
Description
Default passwords can easily be compromised by attackers allowing immediate access to the applications.
- ID
- SV-222662r961863_rule
- Version
- APSC-DV-003280
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the application to use strong authenticators instead of passwords when possible. Otherwise, change default passwords to a DoD-approved strength password and follow all guidance for passwords.