STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must enforce password complexity by requiring that at least one numeric character be used.

DISA Rule

SV-251411r1004732_rule

Vulnerability Number

V-251411

Group Title

SRG-APP-000168-UEM-000098

Rule Version

IMIC-11-005200

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure a password with at least one numeric character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Check "Numeric".

Check Contents

Verify the local user account uses at least one numeric character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Verify "Numeric" is checked.

If "Numeric" is not checked, this is a finding.

Vulnerability Number

V-251411

Documentable

False

Rule Version

IMIC-11-005200

Severity Override Guidance

Verify the local user account uses at least one numeric character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Verify "Numeric" is checked.

If "Numeric" is not checked, this is a finding.

Check Content Reference

M

Target Key

5445