Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-55221 | SRG-APP-000340-NDM-000288 | SV-69467r1_rule | Medium |
Description |
---|
Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges. Privileged functions include, for example, establishing accounts, performing system integrity checks, or administering cryptographic key management activities. Non-privileged users are individuals that do not possess appropriate authorizations. |
STIG | Date |
---|---|
Network Device Management Security Requirements Guide | 2016-07-07 |
Check Text ( C-55841r1_chk ) |
---|
Determine if the network device prevents non-privileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures. This requirement may be verified by demonstration, configuration review, or validated test results. If the network device does not prevent non-privileged users from executing privileged functions, this is a finding. |
Fix Text (F-60085r1_fix) |
---|
Configure the network device to prevent non-privileged users from executing privileged functions. |