STIGQter: STIG Summary: HYCU Protege Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The HYCU virtual appliance must implement replay-resistant authentication mechanisms for network access to privileged accounts.

DISA Rule

SV-268260r1038716_rule

Vulnerability Number

V-268260

Group Title

SRG-APP-000156-NDM-000250

Rule Version

HYCU-ND-000520

Severity

CAT II

CCI(s)

• CCI-001941 - Implement replay-resistant authentication mechanisms for access to privileged accounts and/or non-privileged accounts.

Weight

10

Fix Recommendation

Log in to the HYCU console and configure SSH to use the SSH-2 protocol by editing the protocol variable in the file "/etc/ssh/sshd_config".

Check Contents

The use of SSH-2 protocol for network/remote access prevents replay attacks. The SSH-2 protocol is the standard for the SSH daemon in the Linux OS used by HYCU.

To determine the SSH version in use, log in to the HYCU console and execute the following command:
ssh -v localhost

If the output does not show remote protocol version 2.0 in use, this is a finding.

HYCU web access uses TLS, which addresses this threat. HYCU web access cannot be configured to not use TLS.

Vulnerability Number

V-268260

Documentable

False

Rule Version

HYCU-ND-000520

Severity Override Guidance

The use of SSH-2 protocol for network/remote access prevents replay attacks. The SSH-2 protocol is the standard for the SSH daemon in the Linux OS used by HYCU.

To determine the SSH version in use, log in to the HYCU console and execute the following command:
ssh -v localhost

If the output does not show remote protocol version 2.0 in use, this is a finding.

HYCU web access uses TLS, which addresses this threat. HYCU web access cannot be configured to not use TLS.

Check Content Reference

M

Target Key

5660