STIGQter: STIG Summary: Unified Endpoint Management Server Security Requirements Guide Version: 2 Release: 5 Benchmark Date: 29 Jun 2026:

UEM server must require the change of at least 50 percent of the previous password's characters.

DISA Rule

SV-234373r1213009_rule

Vulnerability Number

V-234373

Group Title

SRG-APP-000170

Rule Version

SRG-APP-000170-UEM-000100

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure the UEM server to require the change of at least 50 percent of the previous password's characters.

Check Contents

Verify the UEM server requires the change of at least 50 percent of the previous password's characters.

If the UEM server does not require the change of at least 50 percent of the previous password's characters when passwords are changed, this is a finding.

Vulnerability Number

V-234373

Documentable

False

Rule Version

SRG-APP-000170-UEM-000100

Severity Override Guidance

Verify the UEM server requires the change of at least 50 percent of the previous password's characters.

If the UEM server does not require the change of at least 50 percent of the previous password's characters when passwords are changed, this is a finding.

Check Content Reference

M

Target Key

5269