STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 02 Jul 2025:

The HP FlexFabric Switch must prohibit password reuse for a minimum of five generations.

DISA Rule

SV-230167r1113775_rule

Vulnerability Number

V-230167

Group Title

SRG-APP-000516-NDM-000317

Rule Version

HFFS-ND-000054

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch server to prohibit password reuse for a minimum of five generations.

[HP] password-control enable
[HP] password-control history 5

Check Contents

Determine if the HP FlexFabric Switch prohibits password reuse for a minimum of five generations.

[HP] display password-control

Global password control configurations:
Password control: Enabled
Password aging: Enabled (60 days)
Password length: Enabled (15 characters)
Password composition: Enabled (1 types, 1 characters per type)
Password history: Enabled (max history records: 4)

If the HP FlexFabric Switch does not have password control enabled and does not prohibit password reuse for a minimum of five generations, this is a finding.

Vulnerability Number

V-230167

Documentable

False

Rule Version

HFFS-ND-000054

Severity Override Guidance

Determine if the HP FlexFabric Switch prohibits password reuse for a minimum of five generations.

[HP] display password-control

Global password control configurations:
Password control: Enabled
Password aging: Enabled (60 days)
Password length: Enabled (15 characters)
Password composition: Enabled (1 types, 1 characters per type)
Password history: Enabled (max history records: 4)

If the HP FlexFabric Switch does not have password control enabled and does not prohibit password reuse for a minimum of five generations, this is a finding.

Check Content Reference

M

Target Key

4037