STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The Mainframe Product must, for password-based authentication, update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

DISA Rule

SV-263677r982589_rule

Vulnerability Number

V-263677

Group Title

SRG-APP-000840

Rule Version

SRG-APP-000840-MFP-000210

Severity

CAT II

CCI(s)

• CCI-004060 - For password-based authentication, update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

Weight

10

Fix Recommendation

Configure the Mainframe Product to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

Check Contents

Verify the Mainframe Product is configured to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

If the Mainframe Product is not configured to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly, this is a finding.

Vulnerability Number

V-263677

Documentable

False

Rule Version

SRG-APP-000840-MFP-000210

Severity Override Guidance

Verify the Mainframe Product is configured to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly.

If the Mainframe Product is not configured to update the list of passwords when organizational passwords are suspected to have been compromised directly or indirectly, this is a finding.

Check Content Reference

M

Target Key

2906