800-53|IA-5h.

Title

AUTHENTICATOR MANAGEMENT

Description

Protecting authenticator content from unauthorized disclosure and modification;

Reference Item Details

Category: IDENTIFICATION AND AUTHENTICATION

Family: IDENTIFICATION AND AUTHENTICATION

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.13.7 Ensure 'Disable 'Remember password' for Internet e-mail accounts' is set to EnabledWindowsCIS Microsoft Office Outlook 2013 v1.1.0 Level 1
1.13.7 Ensure 'Disable 'Remember password' for Internet e-mail accounts' is set to EnabledWindowsCIS Microsoft Office Outlook 2016 v1.1.0 Level 1
2.5.14.6 Ensure 'Disable 'Remember password' for Internet e-mail accounts' is set to 'Enabled'WindowsCIS Microsoft Office Enterprise v1.2.0 L1
3.2 Set 'Disable 'Remember password' for Internet e- mail accounts' to 'Enabled'WindowsCIS MS Office Outlook 2010 v1.0.0
18.4.4 Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 2 v3.2.0
18.4.4 Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0
DG0191-ORACLE11 - Credentials used to access remote databases should be protected by encryption and restricted to authorized users - '$ORACLE_HOME/network/admin/sqlnet.ora WALLET_LOCATION does not exist'UnixDISA STIG Oracle 11 Installation v9r1 Linux
DG0191-ORACLE11 - Credentials used to access remote databases should be protected by encryption and restricted to authorized users.WindowsDISA STIG Oracle 11 Installation v9r1 Windows
Passwords stored in 'secrets' are not visibleUnixTNS Citrix Hypervisor
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 10 v21H1 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 10 v21H2 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 10 v22H2 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server 1903 MS v1.19.9
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server v20H2 MS v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server v1909 DC v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server v1909 MS v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server v2004 MS v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 10 1903 v1.19.9
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server 2022 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server v20H2 DC v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT MSCT Windows Server 2022 DC v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 10 1909 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 11 v22H2 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 11 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 10 1809 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server 1903 DC v1.19.9
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 10 v2004 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 10 v20H2 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 11 v23H2 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server v2004 DC v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows 10 1803 v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server 2019 DC v1.0.0
Remote host allows delegation of non-exportable credentialsWindowsMSCT Windows Server 2019 MS v1.0.0
Salesforce.com : Setting Password Policies - 'Obscure secret answer for password resets = true'Salesforce.comTNS Salesforce Best Practices Audit v1.2.0
Salesforce.com : Setting Password Policies - 'password question cannot contain password'Salesforce.comTNS Salesforce Best Practices Audit v1.2.0
SNMP Destination - v3 Security levelCisco_ACITenable Cisco ACI