Detections
Analytics

CCI|CCI-004061

Title

For password-based authentication, verify when users create or update passwords, that the passwords are not found on the list of commonly-used, expected, or compromised passwords in IA-5 (1) (a).

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
AIOS-18-006950 - Apple iOS/iPadOS 18 must be configured to enforce a passcode reuse prohibition of at least two generations.MDMAirWatch - DISA Apple iOS/iPadOS 18 v1r1
AIOS-18-006950 - Apple iOS/iPadOS 18 must be configured to enforce a passcode reuse prohibition of at least two generations.MDMMobileIron - DISA Apple iOS/iPadOS 18 v1r1
ESXI-80-000043 The ESXi host must prohibit password reuse for a minimum of five generations.VMwareDISA VMware vSphere 8.0 ESXi STIG v2r1
JUEX-NM-000640 - The Juniper EX switch must be configured to use an authentication server for the purpose of authenticating users prior to granting administrative access.JuniperDISA Juniper EX Series Network Device Management v2r2
JUSX-DM-000095 - The Juniper SRX Services Gateway must be configured to use an authentication server to centrally manage authentication and logon settings for remote and nonlocal access.JuniperDISA Juniper SRX Services Gateway NDM v3r2
O121-C2-014000 - The DBMS must support organizational requirements to prohibit password reuse for the organization-defined number of generations.OracleDBDISA STIG Oracle 12c v3r2 Database
PHTN-40-000043 The Photon operating system must prohibit password reuse for a minimum of five generations.UnixDISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1
PHTN-40-000243 The Photon operating system must be configured to use the pam_pwhistory.so module.UnixDISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r1
SPLK-CL-000390 - Splunk Enterprise must prohibit password reuse for a minimum of five generations for the account of last resort.SplunkDISA STIG Splunk Enterprise 7.x for Windows v3r1 REST API
SPLK-CL-000410 - Splunk Enterprise must be configured to prohibit password reuse for a minimum of five generations.UnixDISA STIG Splunk Enterprise 8.x for Linux v2r1 STIG OS
VCSA-80-000070 The vCenter Server must prohibit password reuse for a minimum of five generations.VMwareDISA VMware vSphere 8.0 vCenter STIG v2r1
WN10-AC-000020 - The password history must be configured to 24 passwords remembered.WindowsDISA Windows 10 STIG v3r2
WN11-AC-000020 - The password history must be configured to 24 passwords remembered.WindowsDISA Windows 11 STIG v2r2
WN19-AC-000040 - Windows Server 2019 password history must be configured to 24 passwords remembered.WindowsDISA Windows Server 2019 STIG v3r2
WN22-AC-000040 - Windows Server 2022 password history must be configured to 24 passwords remembered.WindowsDISA Windows Server 2022 STIG v2r2