The network device must automatically remove or disable temporary user accounts after 72 hours.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-55039	SRG-APP-000024-NDM-000206	SV-69285r1_rule		Medium

Description
Temporary accounts are established as part of normal account activation procedures when there is a need for short-term accounts without the demand for immediacy in account activation. If temporary accounts remain active when no longer needed, they may be used to gain unauthorized access. The risk is greater for the network device since these accounts have elevated privileges. To mitigate this risk, automated termination of all temporary accounts must be set upon account creation.

Description

Temporary accounts are established as part of normal account activation procedures when there is a need for short-term accounts without the demand for immediacy in account activation. If temporary accounts remain active when no longer needed, they may be used to gain unauthorized access. The risk is greater for the network device since these accounts have elevated privileges. To mitigate this risk, automated termination of all temporary accounts must be set upon account creation.

STIG	Date
Network Device Management Security Requirements Guide	2017-04-07

Details

Check Text ( C-55661r1_chk )
Review the network device configuration to determine if it automatically disables or removes temporary accounts after 72 hours or is configured to use an authentication server that would perform this function. If the use of temporary accounts is prohibited, this is not a finding. If the network device or its associated authentication server does not automatically disable or remove temporary accounts after 72 hours, this is a finding.

Check Text ( C-55661r1_chk )

Review the network device configuration to determine if it automatically disables or removes temporary accounts after 72 hours or is configured to use an authentication server that would perform this function. If the use of temporary accounts is prohibited, this is not a finding. If the network device or its associated authentication server does not automatically disable or remove temporary accounts after 72 hours, this is a finding.

Fix Text (F-59905r1_fix)
Configure the network device or its associated authentication server to automatically disable or remove temporary accounts after 72 hours. An acceptable method would be to place an expiration date on the account upon creation.