The MQ Appliance network device must prohibit password reuse for a minimum of five generations.
An XCCDF Rule
Description
<VulnDiscussion>Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. To meet password policy requirements, passwords need to be changed at specific policy-based intervals. If the MQ Appliance network device allows the user to consecutively reuse their password when that password has exceeded its defined lifetime, the end result is a password that is not changed as per policy requirements. For LDAP authentication, the authentication server is responsible for enforcing password policy. When the LDAP server is not available, password policy is enforced by the MQ Appliance's RBM Password Policy.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations>MQMH-ND-000570</Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl>In the MQ Appliance WebGUI, go to Administration >> Access >> RBM Settings.</MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-89625r1_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Log on to the MQ Appliance WebGUI as a privileged user. Go to Administration (gear icon) >> Access> > RBM Settings.
Set Authentication Method to LDAP.
Configure LDAP server connection as required.