STIGQter: STIG Summary: Cisco ACI NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

The Cisco ACI must be configured to allow user selection of long passwords and passphrases, including spaces and all printable characters, for password-based authentication.

DISA Rule

SV-271958r1168373_rule

Vulnerability Number

V-271958

Group Title

SRG-APP-000860-NDM-000250

Rule Version

CACI-ND-000043

Severity

CAT II

CCI(s)

• CCI-004064 - For password-based authentication, allow user selection of long passwords and passphrases, including spaces and all printable characters.
• CCI-004065 - For password-based authentication, employ automated tools to assist the user in selecting strong password authenticators.
• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

1. Navigate to Admin >> AAA >> Security.
2. In the Work pane, choose Default Settings >> Edit.
3. In the Properties section, verify "Password Strength Check" is checked.

Check Contents

1. Navigate to Admin >> AAA >> Security.
2. In the Work pane, choose Default Settings >> Edit.
3. In the Properties section, verify "Password Strength Check" is checked.

If the Cisco ACI fabric is not configured to allow user selection of long passwords and passphrases, including spaces and all printable characters for password-based authentication, this is a finding.

Vulnerability Number

V-271958

Documentable

False

Rule Version

CACI-ND-000043

Severity Override Guidance

1. Navigate to Admin >> AAA >> Security.
2. In the Work pane, choose Default Settings >> Edit.
3. In the Properties section, verify "Password Strength Check" is checked.

If the Cisco ACI fabric is not configured to allow user selection of long passwords and passphrases, including spaces and all printable characters for password-based authentication, this is a finding.

Check Content Reference

M

Target Key

5682