STIGQter: STIG Summary: Cisco ACI NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

The Cisco ACI must enforce a minimum 15-character password length.

DISA Rule

SV-271960r1168376_rule

Vulnerability Number

V-271960

Group Title

SRG-APP-000164-NDM-000252

Rule Version

CACI-ND-000045

Severity

CAT II

CCI(s)

• CCI-004066 - For password-based authentication, enforce organization-defined composition and complexity rules.

Weight

10

Fix Recommendation

1. Navigate to Admin >> AAA >> Security.
2. In the Work pane, choose Default Settings >> Edit
3. In the Properties section, verify "Password Strength Check" is checked.
4. In the dialog box that opens, verify "Password Minimum Length" is set to "15".

Check Contents

1. Navigate to Admin >> AAA >> Security.
2. In the Work pane, choose Default Settings >> Edit.
3. In the Properties section, verify "Password Strength Check" is checked.

If the Cisco ACI fabric is not configured to enforce a minimum 15-character password length, this is a finding.

Vulnerability Number

V-271960

Documentable

False

Rule Version

CACI-ND-000045

Severity Override Guidance

1. Navigate to Admin >> AAA >> Security.
2. In the Work pane, choose Default Settings >> Edit.
3. In the Properties section, verify "Password Strength Check" is checked.

If the Cisco ACI fabric is not configured to enforce a minimum 15-character password length, this is a finding.

Check Content Reference

M

Target Key

5682