STIGQter: STIG Summary: Riverbed NetIM OS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

Ubuntu OS must not allow accounts configured with blank or null passwords.

DISA Rule

SV-275658r1148024_rule

Vulnerability Number

V-275658

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

RIIM-OS-611060

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Remove any instances of the "nullok" option in "/etc/pam.d/common-password" to prevent logons with empty passwords.

Remove any instances of the "nullok" option in "/etc/pam.d/common-auth" and "/etc/pam.d/common-password".

Check Contents

Verify null passwords cannot be used. Run the following command:

$ grep nullok /etc/pam.d/common-auth /etc/pam.d/common-password

If this produces any output, this is a finding.

Vulnerability Number

V-275658

Documentable

False

Rule Version

RIIM-OS-611060

Severity Override Guidance

Verify null passwords cannot be used. Run the following command:

$ grep nullok /etc/pam.d/common-auth /etc/pam.d/common-password

If this produces any output, this is a finding.

Check Content Reference

Target Key

5706