WN12-CC-000123 - The Windows Remote Management (WinRM) client must not use Basic authentication.

Information

Basic authentication uses plain text passwords that could be used to compromise a system.

Solution

Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Remote Management (WinRM) -> WinRM Client -> 'Allow Basic authentication' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_2012_and_2012_R2_MS_V3R7_STIG.zip

Item Details

Category: MAINTENANCE

References: 800-53|MA-4c., CAT|I, CCI|CCI-000877, Rule-ID|SV-225396r877395_rule, STIG-ID|WN12-CC-000123, STIG-Legacy|SV-51752, STIG-Legacy|V-36712, Vuln-ID|V-225396

Plugin: Windows

Control ID: a3c657a96d24e9bf10601ba69822478e57364677bbf652b17f0961b9ad33ba1d