STIGQter: STIG Summary: AAA Services Security Requirements Guide Version: 2 Release: 2 Benchmark Date: 30 Jan 2025:

For password-based authentication, AAA Services must be configured to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

DISA Rule

SV-263533r981610_rule

Vulnerability Number

V-263533

Group Title

SRG-APP-000840

Rule Version

SRG-APP-000840-AAA-000160

Severity

CAT II

CCI(s)

• CCI-004060 - For password-based authentication, update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

Weight

10

Fix Recommendation

Configure AAA Services to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

Check Contents

Verify AAA Services is configured to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

If AAA Services is not configured to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly, this is a finding.

Vulnerability Number

V-263533

Documentable

False

Rule Version

SRG-APP-000840-AAA-000160

Severity Override Guidance

Verify AAA Services is configured to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

If AAA Services is not configured to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly, this is a finding.

Check Content Reference

M

Target Key

2896