Group or shared userids are being used on a network attached KVM switch.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-6710 | KVM03.006.00 | SV-6907r1_rule | IAGA-1 | High |
| Description |
|---|
| Usage of group or shared userids makes it impossible to attribute an action to the originating user. In the case of a malicious action this could make prosecution impossible. The IAO will ensure that group or shared userids are not used. |
| STIG | Date |
|---|---|
| Keyboard Video and Mouse Switch STIG | 2014-08-04 |
Details
| Check Text ( C-2722r1_chk ) |
|---|
| The reviewer will interview the IAO verify that a group or shared userids are not being used. |
| Fix Text (F-6317r1_fix) |
|---|
| Remove the shared or group userid and issue individual userids to each user who requires access to the network attached KVM switch. |