STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must enforce password complexity by requiring that at least one lowercase character be used.

DISA Rule

SV-251410r1004731_rule

Vulnerability Number

V-251410

Group Title

SRG-APP-000167-UEM-000097

Rule Version

IMIC-11-005100

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure a password with at least one lowercase character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Check "Lower Case".

Check Contents

Verify the local user account uses at least one lowercase character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Verify "Lower Case" is checked.

If "Lower Case" is not checked, this is a finding.

Vulnerability Number

V-251410

Documentable

False

Rule Version

IMIC-11-005100

Severity Override Guidance

Verify the local user account uses at least one lowercase character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Verify "Lower Case" is checked.

If "Lower Case" is not checked, this is a finding.

Check Content Reference

M

Target Key

5445