Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must display the number of unsuccessful login attempts since the last successful login for a user account upon logging in.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22300 | GEN000454 | SV-25947r1_rule | ECSC-1 | Low |
| Description |
|---|
| Providing users with feedback on recent login failures facilitates user recognition and reporting of attempted unauthorized account use. |
| STIG | Date |
|---|---|
| Draft AIX Security Technical Implementation Guide | 2011-08-17 |
Details
| Check Text ( C-30375r1_chk ) |
|---|
| Determine if the system displays the number of failed login attempts upon logging in. Attempt to log into the system once using an invalid password or other authenticator, then log into the system using the same account with a valid authenticator. If the system does not display a message indicating there was a failed login attempt, this is a finding. |
| Fix Text (F-27155r1_fix) |
|---|
| Configure the system to display the number of failed logins upon logging in. Consult OS documentation for the necessary procedure. |