STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must enforce password complexity by requiring that at least one uppercase character be used.

DISA Rule

SV-251409r1004730_rule

Vulnerability Number

V-251409

Group Title

SRG-APP-000166-UEM-000096

Rule Version

IMIC-11-005000

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure a password with at least one uppercase character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Check "Upper Case".

Check Contents

Verify the local user account uses at least one uppercase character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Verify "Upper Case" is checked.

If "Upper Case" is not checked, this is a finding.

Vulnerability Number

V-251409

Documentable

False

Rule Version

IMIC-11-005000

Severity Override Guidance

Verify the local user account uses at least one uppercase character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Verify "Upper Case" is checked.

If "Upper Case" is not checked, this is a finding.

Check Content Reference

M

Target Key

5445