Item Search

NameAudit NamePluginCategory
APPL-14-004022 - The macOS system must require users to reauthenticate for privilege escalation when using the "sudo" command.DISA Apple macOS 14 (Sonoma) STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

APPL-14-004060 - The macOS system must configure sudoers timestamp type.DISA Apple macOS 14 (Sonoma) STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

CASA-VN-000350 - The Cisco ASA VPN gateway must be configured to renegotiate the IPsec Security Association after eight hours or less.DISA STIG Cisco ASA VPN v2r2Cisco

IDENTIFICATION AND AUTHENTICATION

CASA-VN-000360 - The Cisco ASA VPN gateway must be configured to renegotiate the IKE security association after 24 hours or less.DISA STIG Cisco ASA VPN v2r2Cisco

IDENTIFICATION AND AUTHENTICATION

CD12-00-010100 - PostgreSQL must require users to reauthenticate when organization-defined circumstances or situations require reauthentication.DISA STIG Crunchy Data PostgreSQL DB v3r1PostgreSQLDB

SYSTEM AND COMMUNICATIONS PROTECTION

EPAS-00-008800 - The EDB Postgres Advanced Server must require users to reauthenticate when organization-defined circumstances or situations require reauthentication.EnterpriseDB PostgreSQL Advanced Server DB v2r1PostgreSQLDB

SYSTEM AND COMMUNICATIONS PROTECTION

MADB-10-008200 - MariaDB must require users to reauthenticate when organization-defined circumstances or situations require reauthentication.DISA MariaDB Enterprise 10.x v2r1 DBMySQLDB

SYSTEM AND COMMUNICATIONS PROTECTION

MYS8-00-010400 - The MySQL Database Server 8.0 must require users to reauthenticate when organization-defined circumstances or situations require reauthentication.DISA Oracle MySQL 8.0 v2r2 DBMySQLDB

IDENTIFICATION AND AUTHENTICATION

OL08-00-010380 - OL 8 must require users to provide a password for privilege escalation.DISA Oracle Linux 8 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-010381 - OL 8 must require users to reauthenticate for privilege escalation and changing roles.DISA Oracle Linux 8 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-010384 - OL 8 must require reauthentication when using the 'sudo' command.DISA Oracle Linux 8 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-010385 - The OL 8 operating system must not be configured to bypass password requirements for privilege escalation.DISA Oracle Linux 8 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-40-000133 The Photon operating system must require users to reauthenticate for privilege escalation.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-08-010380 - RHEL 8 must require users to provide a password for privilege escalation.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-08-010381 - RHEL 8 must require users to reauthenticate for privilege escalation.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-08-010384 - RHEL 8 must require re-authentication when using the 'sudo' command - sudo command.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-08-010385 - The RHEL 8 operating system must not be configured to bypass password requirements for privilege escalation.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-09-432015 - RHEL 9 must require reauthentication when using the 'sudo' command - sudo command.DISA Red Hat Enterprise Linux 9 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-09-432025 - RHEL 9 must require users to reauthenticate for privilege escalation.DISA Red Hat Enterprise Linux 9 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-09-611085 - RHEL 9 must require users to provide a password for privilege escalation.DISA Red Hat Enterprise Linux 9 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-09-611145 - RHEL 9 must not be configured to bypass password requirements for privilege escalation.DISA Red Hat Enterprise Linux 9 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-010450 - The SUSE operating system must reauthenticate users when changing authenticators, roles, or escalating privileges.DISA SLES 15 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-020102 - The SUSE operating system must require reauthentication when using the 'sudo' command - sudo command.DISA SLES 15 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-020104 - The SUSE operating system must not be configured to bypass password requirements for privilege escalation.DISA SLES 15 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

SPLK-CL-000010 - Splunk Enterprise idle session timeout must be set to not exceed 15 minutes.DISA STIG Splunk Enterprise 8.x for Linux v2r1 STIG OSUnix

ACCESS CONTROL

SPLK-CL-000180 - Splunk Enterprise idle session timeout must be set to not exceed 15 minutes.DISA STIG Splunk Enterprise 7.x for Windows v3r1 REST APISplunk

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-20-010014 - The Ubuntu operating system must require users to reauthenticate for privilege escalation or when changing roles.DISA STIG Ubuntu 20.04 LTS v2r1Unix

IDENTIFICATION AND AUTHENTICATION

UBTU-22-432010 - Ubuntu 22.04 LTS must require users to reauthenticate for privilege escalation or when changing roles.DISA STIG Canonical Ubuntu 22.04 LTS v2r2Unix

IDENTIFICATION AND AUTHENTICATION

VCLU-80-000070 The vCenter Lookup service must set an inactive timeout for sessions.DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r1Unix

ACCESS CONTROL

VCPF-80-000070 The vCenter Perfcharts service must set an inactive timeout for sessions.DISA VMware vSphere 8.0 vCenter Appliance Perfcharts STIG v2r1Unix

ACCESS CONTROL

VCST-80-000070 The vCenter STS service must set an inactive timeout for sessions.DISA VMware vSphere 8.0 vCenter Appliance Secure Token Service (STS) STIG v2r1Unix

ACCESS CONTROL

VCUI-80-000070 The vCenter UI service must set an inactive timeout for sessions.DISA VMware vSphere 8.0 vCenter Appliance User Interface (UI) STIG v2r1Unix

ACCESS CONTROL

WN10-CC-000145 - Users must be prompted for a password on resume from sleep (on battery).DISA Windows 10 STIG v3r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN10-CC-000150 - The user must be prompted for a password on resume from sleep (plugged in).DISA Windows 10 STIG v3r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN10-CC-000355 - The Windows Remote Management (WinRM) service must not store RunAs credentials.DISA Windows 10 STIG v3r2Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN11-CC-000145 - Users must be prompted for a password on resume from sleep (on battery).DISA Windows 11 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN11-CC-000150 - The user must be prompted for a password on resume from sleep (plugged in).DISA Windows 11 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN11-CC-000270 - Passwords must not be saved in the Remote Desktop Client.DISA Windows 11 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN11-CC-000280 - Remote Desktop Services must always prompt a client for passwords upon connection.DISA Windows 11 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN11-CC-000355 - The Windows Remote Management (WinRM) service must not store RunAs credentials.DISA Windows 11 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN11-SO-000245 - User Account Control approval mode for the built-in Administrator must be enabled.DISA Windows 11 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN11-SO-000255 - User Account Control must automatically deny elevation requests for standard users.DISA Windows 11 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN11-SO-000270 - User Account Control must run all administrators in Admin Approval Mode, enabling UAC.DISA Windows 11 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN19-SO-000410 - Windows Server 2019 User Account Control must automatically deny standard user requests for elevation.DISA Windows Server 2019 STIG v3r2Windows

IDENTIFICATION AND AUTHENTICATION

WN22-CC-000340 - Windows Server 2022 must not save passwords in the Remote Desktop Client.DISA Windows Server 2022 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN22-CC-000360 - Windows Server 2022 Remote Desktop Services must always prompt a client for passwords upon connection.DISA Windows Server 2022 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN22-CC-000520 - Windows Server 2022 Windows Remote Management (WinRM) service must not store RunAs credentials.DISA Windows Server 2022 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN22-SO-000380 - Windows Server 2022 User Account Control (UAC) approval mode for the built-in Administrator must be enabled.DISA Windows Server 2022 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN22-SO-000410 - Windows Server 2022 User Account Control (UAC) must automatically deny standard user requests for elevation.DISA Windows Server 2022 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION

WN22-SO-000440 - Windows Server 2022 User Account Control (UAC) must run all administrators in Admin Approval Mode, enabling UAC.DISA Windows Server 2022 STIG v2r2Windows

IDENTIFICATION AND AUTHENTICATION