CCI|CCI-002038

Title

The organization requires users to reauthenticate upon organization-defined circumstances or situations requiring reauthentication.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.64 UBTU-24-300021UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.66 OL08-00-010380UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.67 OL08-00-010381UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.70 OL08-00-010384UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.71 OL08-00-010385UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.88 UBTU-22-432010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.127 WN22-CC-000340WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.127 WN22-CC-000340WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.129 WN10-CC-000145WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.129 WN22-CC-000360WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.129 WN22-CC-000360WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.130 WN10-CC-000150WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.134 APPL-14-004022UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.138 APPL-14-004060UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.145 WN22-CC-000520WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.145 WN22-CC-000520WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.156 WN10-CC-000270WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.158 WN10-CC-000280WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.174 WN10-CC-000355WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.223 WN10-SO-000245WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.226 WN10-SO-000255WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.229 WN10-SO-000270WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
1.245 WN22-SO-000380WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.245 WN22-SO-000380WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.248 WN22-SO-000410WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.248 WN22-SO-000410WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.251 WN22-SO-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.251 WN22-SO-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.305 RHEL-09-432015UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.307 RHEL-09-432025UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.309 RHEL-09-432035UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.326 RHEL-09-611085UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.337 RHEL-09-611145UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
3.070 - The system is configured to permit storage of credentials or .NET Passports.WindowsDISA Windows Vista STIG v6r41
3.129 - User Account Control - Built In Admin Approval ModeWindowsDISA Windows Vista STIG v6r41
3.131 - User Account Control - Behavior of elevation prompt for standard users.WindowsDISA Windows Vista STIG v6r41
3.137 - User Account Control - Run all admins in Admin Approval ModeWindowsDISA Windows Vista STIG v6r41
5.2.4 Ensure users must provide password for escalationUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.2.4 Ensure users must provide password for escalationUnixCIS Amazon Linux 2 STIG v2.0.0 STIG
5.2.5 Ensure users must re-authenticate for privilege escalationUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.2.7 Ensure sudo authentication timeout is configuredUnixCIS Amazon Linux 2 STIG v2.0.0 STIG
5.2.7 Ensure sudo authentication timeout is configured - sudo command.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
5.042 - Terminal Services is not configured to always prompt a client for passwords upon connection.WindowsDISA Windows Vista STIG v6r41
5.116 - Terminal Services / Remote Desktop Service - Prevent password saving in the Remote Desktop ClientWindowsDISA Windows Vista STIG v6r41
5.224 - Power Mgmt - Password Wake on BatteryWindowsDISA Windows Vista STIG v6r41
5.225 - Power Mgmt - Password Wake When Plugged InWindowsDISA Windows Vista STIG v6r41
AIX7-00-002061 - AIX must remove NOPASSWD tag from sudo config files.UnixDISA STIG AIX 7.x v3r1
AIX7-00-002062 - AIX must remove !authenticate option from sudo config files.UnixDISA STIG AIX 7.x v3r1
AIX7-00-002108 - If GSSAPI authentication is not required on AIX, the SSH daemon must disable GSSAPI authentication.UnixDISA STIG AIX 7.x v3r1
APPL-13-004022 - The macOS system must require users to reauthenticate for privilege escalation when using the "sudo" command.UnixDISA STIG Apple macOS 13 v1r5