STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must enforce password complexity by requiring that at least one special character be used.

DISA Rule

SV-251412r1004733_rule

Vulnerability Number

V-251412

Group Title

SRG-APP-000169-UEM-000099

Rule Version

IMIC-11-005300

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

Configure a password with at least one special character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Check "Special".

Check Contents

Verify the local user account uses at least one special character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Verify "Special" is checked.

If "Special" is not checked, this is a finding.

Vulnerability Number

V-251412

Documentable

False

Rule Version

IMIC-11-005300

Severity Override Guidance

Verify the local user account uses at least one special character:

1. Log in to the Core console.
2. Security >> Password Policy.
3. Verify "Special" is checked.

If "Special" is not checked, this is a finding.

Check Content Reference

M

Target Key

5445