Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Microsoft Windows Server 2022 Security Technical Implementation Guide
SRG-OS-000074-GPOS-00042
Windows Server 2022 unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers.
Windows Server 2022 unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers.
An XCCDF Rule
Details
Profiles
Prose
Windows Server 2022 unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers.
Medium Severity
<VulnDiscussion>Some non-Microsoft SMB servers only support unencrypted (plain-text) password authentication. Sending plain-text passwords across the network when authenticating to an SMB server reduces the overall security of the environment. Check with the vendor of the SMB server to determine if there is a way to support encrypted password authentication.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>