ACF2 TSOTWX GSO record values must be set to obliterate the logon password on TWX devices.
An XCCDF Rule
Description
<VulnDiscussion>To prevent the compromise of authentication information, such as passwords during the authentication process, the feedback from the operating system must not provide any information allowing an unauthorized user to compromise the authentication mechanism. Obfuscation of user-provided information that is typed into the system is a method used when addressing this risk. Displaying asterisks when a user types in a password is an example of obscuring feedback of authentication information.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-223509r695443_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Define a cross out mask to obliterate the logon password on TWX devices.
CR(15)
IDLE(17)
LENGTH(8)
M1(X)