Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-55039 | SRG-APP-000024-NDM-000206 | SV-69285r1_rule | Medium |
Description |
---|
Temporary accounts are established as part of normal account activation procedures when there is a need for short-term accounts without the demand for immediacy in account activation. If temporary accounts remain active when no longer needed, they may be used to gain unauthorized access. The risk is greater for the network device since these accounts have elevated privileges. To mitigate this risk, automated termination of all temporary accounts must be set upon account creation. |
STIG | Date |
---|---|
Network Device Management Security Requirements Guide | 2018-07-02 |
Check Text ( C-55661r1_chk ) |
---|
Review the network device configuration to determine if it automatically disables or removes temporary accounts after 72 hours or is configured to use an authentication server that would perform this function. If the use of temporary accounts is prohibited, this is not a finding. If the network device or its associated authentication server does not automatically disable or remove temporary accounts after 72 hours, this is a finding. |
Fix Text (F-59905r1_fix) |
---|
Configure the network device or its associated authentication server to automatically disable or remove temporary accounts after 72 hours. An acceptable method would be to place an expiration date on the account upon creation. |