Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-263586 | SRG-APP-000705-CTR-000110 | SV-263586r982453_rule | Medium |
Description |
---|
Disabling expired, inactive, or otherwise anomalous accounts supports the concepts of least privilege and least functionality which reduce the attack surface of the system. |
STIG | Date |
---|---|
Container Platform Security Requirements Guide | 2024-05-28 |
Check Text ( C-67486r982452_chk ) |
---|
Verify the container platform is configured to disable accounts when the accounts are no longer associated to a user. If the container platform is not configured to disable accounts when the accounts are no longer associated to a user, this is a finding. |
Fix Text (F-67394r981897_fix) |
---|
Configure the container platform to disable accounts when the accounts are no longer associated to a user. |