The Voice Video Session Manager must be configured to obfuscate passwords within configuration files.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-206859	SRG-NET-000512-VVSM-00054	SV-206859r508661_rule		Medium

Description
Passwords need to be protected at all times and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. Voice Video Session Managers must enforce password encryption when storing passwords within configuration files.

STIG	Date
Voice Video Session Management Security Requirements Guide	2020-09-04

Details

Check Text ( C-7114r364766_chk )
Verify the Voice Video Session Manager is configured to obfuscate passwords within configuration files. If the Voice Video Session Manager is not configured to obfuscate passwords within configuration files, this is a finding.

Fix Text (F-7114r364767_fix)
Configure the Voice Video Session Manager to obfuscate passwords within configuration files.