STIGQter: STIG Summary: Trend Micro TippingPoint NDM Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Apr 2025:

The password for the local account of last resort and the device password (if configured) must be changed when members who had access to the password leave the role and are no longer authorized access.

DISA Rule

SV-242260r1018794_rule

Vulnerability Number

V-242260

Group Title

SRG-APP-000317-NDM-000282

Rule Version

TIPP-NM-000950

Severity

CAT II

CCI(s)

• CCI-004045 - Require users to be individually authenticated before granting access to the shared accounts or resources.

Weight

10

Fix Recommendation

Change the password for the account of last resort.

1. Navigate to Admin >> Authentication and Authorization >> Users.
2. Select the account of last resort.
3. Click Edit and Select Authentication.
4. Enter and confirm the password.

To change the password for managed devices, if configured:
Navigate to Devices >> All Devices >> Member Summary >> Device Users.

The Device User Accounts screen displays a table that lists the user accounts available on managed devices.

Check Contents

Have the local representative show password change logs or documentation to show this is a local process.

If the password for the local account of last resort is not changed when members who had access to the password leave the role and are no longer authorized access, this is a finding.

Vulnerability Number

V-242260

Documentable

False

Rule Version

TIPP-NM-000950

Severity Override Guidance

Have the local representative show password change logs or documentation to show this is a local process.

If the password for the local account of last resort is not changed when members who had access to the password leave the role and are no longer authorized access, this is a finding.

Check Content Reference

M

Target Key

5369