Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must disable accounts after three consecutive unsuccessful login attempts.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| GEN000460-ESXI5-PF | GEN000460-ESXI5-PF | GEN000460-ESXI5-PF_rule | Medium |
| Description |
|---|
| Disabling accounts after a limited number of unsuccessful login attempts improves protection against password guessing attacks. Permanent finding - Due to being the system default (non-configurable) behavior. The pam_tally.so module that supports this function is not part of the default installation. |
| STIG | Date |
|---|---|
| VMware ESXi v5 Security Technical Implementation Guide | 2013-01-15 |
Details
| Check Text ( C-GEN000460-ESXI5-PF_chk ) |
|---|
| ESXi does not support this requirement. This is a permanent finding. |
| Fix Text (F-GEN000460-ESXI5-PF_fix) |
|---|
| This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed. |