Audits
Settings
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Theme
Light
Dark
Auto
Help
Plugins
Overview
Plugins Pipeline
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Release Notes
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Settings
Theme
Light
Dark
Auto
Detections
Plugins
Overview
Plugins Pipeline
Release Notes
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
Analytics
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Audits
References
CCI
CCI-002235
CCI
CCI|CCI-002235
Title
Prevent non-privileged users from executing privileged functions.
Reference Item Details
Reference:
CCI - DISA Control Correlation Identifier
Category:
2024
Audit Items
View all Reference Audit Items
Name
Plugin
Audit Name
1.6.1.9 Ensure non-privileged users are prevented from executing privileged functions
Unix
CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
2.023 - Standard user accounts must only have Read permissions to the Winlogon registry key.
Windows
DISA Windows Vista STIG v6r41
3.030 - Anonymous access to the registry must be restricted.
Windows
DISA Windows Vista STIG v6r41
4.005 - Unapproved Users have access to Debug programs.
Windows
DISA Windows Vista STIG v6r41
4.009 - Unauthorized users are granted right to Act as part of the operating system.
Windows
DISA Windows Vista STIG v6r41
4.027 - Only administrators responsible for the system must have Administrator rights on the system.
Windows
DISA Windows Vista STIG v6r41
6.1.15 Ensure the file permissions ownership and group membership of system files and commands match the vendor values
Unix
CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIOS-16-014800 - Apple iOS/iPadOS 16 must be configured to disable Auto Unlock of the iPhone by an Apple Watch.
MDM
AirWatch - DISA Apple iOS/iPadOS 16 v2r1
AIOS-16-014800 - Apple iOS/iPadOS 16 must be configured to disable Auto Unlock of the iPhone by an Apple Watch.
MDM
MobileIron - DISA Apple iOS/iPadOS 16 v2r1
AIOS-17-014800 - Apple iOS/iPadOS 17 must be configured to disable 'Auto Unlock' of the iPhone by an Apple Watch - Auto Unlock of the iPhone by an Apple Watch.
MDM
MobileIron - DISA Apple iOS/iPadOS 17 v2r1
AIOS-17-014800 - Apple iOS/iPadOS 17 must be configured to disable 'Auto Unlock' of the iPhone by an Apple Watch - Auto Unlock of the iPhone by an Apple Watch.
MDM
AirWatch - DISA Apple iOS/iPadOS 17 v2r1
APPL-12-002069 - The macOS system must prevent nonprivileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.
Unix
DISA STIG Apple macOS 12 v1r9
APPL-13-002069 - The macOS system must prevent nonprivileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.
Unix
DISA STIG Apple macOS 13 v1r4
APPL-14-002069 - The macOS system must require administrator privileges to modify systemwide settings.
Unix
DISA Apple macOS 14 (Sonoma) STIG v2r1
APPL-15-002069 - The macOS system must require an administrator password to modify systemwide preferences.
Unix
DISA Apple macOS 15 (Sequoia) STIG v1r1
AS24-U1-000690 - Non-privileged accounts on the hosting system must only access Apache web server security-relevant information and functions through a distinct administrative account.
Unix
DISA STIG Apache Server 2.4 Unix Server v3r1
AS24-U1-000690 - Non-privileged accounts on the hosting system must only access Apache web server security-relevant information and functions through a distinct administrative account.
Unix
DISA STIG Apache Server 2.4 Unix Server v3r1 Middleware
AS24-W1-000690 - Non-privileged accounts on the hosting system must only access Apache web server security-relevant information and functions through a distinct administrative account.
Windows
DISA STIG Apache Server 2.4 Windows Server v2r3
AS24-W1-000690 - Non-privileged accounts on the hosting system must only access Apache web server security-relevant information and functions through a distinct administrative account.
Windows
DISA STIG Apache Server 2.4 Windows Server v3r1
AS24-W2-000690 - Non-privileged accounts on the hosting system must only access Apache web server security-relevant information and functions through a distinct administrative account.
Windows
DISA STIG Apache Server 2.4 Windows Site v2r1
Big Sur - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Big Sur v1.4.0 - CNSSI 1253
Catalina - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Catalina v1.5.0 - 800-171
Catalina - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Catalina v1.5.0 - All Profiles
Catalina - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Unix
NIST macOS Catalina v1.5.0 - 800-53r4 High
CD12-00-011700 - PostgreSQL must prevent non-privileged users from executing privileged functions, to include disabling, circumventing, or altering implemented security safeguards/countermeasures.
PostgreSQLDB
DISA STIG Crunchy Data PostgreSQL DB v3r1
DB2X-00-007000 - DB2 must prevent non-privileged users from executing privileged functions, to include disabling, circumventing, or altering implemented security safeguards/countermeasures
IBM_DB2DB
DISA STIG IBM DB2 v10.5 LUW v2r1 Database
DKER-EE-001170 - A policy set using the built-in role-based access control (RBAC) capabilities in the Universal Control Plane (UCP) component of Docker Enterprise must be configured.
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - repositoryAccess
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix DTR v2r2
DKER-EE-001180 - A policy set using the built-in role-based access control (RBAC) capabilities in the Docker Trusted Registry (DTR) component of Docker Enterprise must be set - team member access
Unix
DISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r2
DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - group
Unix
McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5
DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - group
Unix
McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Local Client v1r6
DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - user
Unix
McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Local Client v1r6
DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - user
Unix
McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5
DTOO201 - Connection verification of permissions must be enforced.
Windows
DISA STIG Microsoft Office System 2013 v2r2
DTOO201 - Connection verification of permissions must be enforced.
Windows
DISA STIG Microsoft Office System 2016 v2r3
DTOO201 - Office System - Connection verification of permissions must be enforced.
Windows
DISA STIG Office System 2010 v1r13
EP11-00-007400 - The EDB Postgres Advanced Server must prevent non-privileged users from executing privileged functions, to include disabling, circumventing, or altering implemented security safeguards/countermeasures.
PostgreSQLDB
EDB PostgreSQL Advanced Server v11 DB Audit v2r4
EPAS-00-007400 - The EDB Postgres Advanced Server must prevent nonprivileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.
Unix
EnterpriseDB PostgreSQL Advanced Server OS Linux v2r1
EX19-ED-000174 Role-Based Access Control must be defined for privileged and nonprivileged users.
Windows
DISA Microsoft Exchange 2019 Edge Server STIG v2r1
EX19-MB-000173 Role-Based Access Control must be defined for privileged and nonprivileged users.
Windows
DISA Microsoft Exchange 2019 Mailbox Server STIG v2r1
