UCF STIG Viewer Logo

The network device must prevent non-privileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.


Overview

Finding ID Version Rule ID IA Controls Severity
V-202093 SRG-APP-000340-NDM-000288 SV-202093r399775_rule High
Description
Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges. Privileged functions include, for example, establishing accounts, performing system integrity checks, or administering cryptographic key management activities. Non-privileged users are individuals that do not possess appropriate authorizations.
STIG Date
Network Device Management Security Requirements Guide 2021-03-16

Details

Check Text ( C-2219r381920_chk )
Determine if the network device prevents non-privileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures. This requirement may be verified by demonstration, configuration review, or validated test results. If the network device does not prevent non-privileged users from executing privileged functions, this is a finding.
Fix Text (F-2220r381921_fix)
Configure the network device to prevent non-privileged users from executing privileged functions.