The network element must be configured to ensure passwords are not viewable when displaying configuration information.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3062	NET0600	SV-3062r3_rule	ECSC-1	High

Description
Many attacks on information systems and network elements are launched from within the network. Hence, it is imperative that all passwords are encrypted so they cannot be intercepted by viewing the console or printout of the configuration.

STIG	Date
Infrastructure Router Security Technical Implementation Guide	2013-10-08

Details

Check Text ( C-3508r3_chk )
Review the network element configuration to determine if passwords are viewable.

Fix Text (F-3087r6_fix)
Configure the network element to ensure passwords are not viewable when displaying configuration information.