Free DISA STIG and SRG Library | Vaulted

V-3062

Network devices must be configured to ensure passwords are not viewable when displaying configuration information.

Finding ID
NET0600
Rule ID
SV-3062r4_rule
Severity
Cat I
CCE
(None)
Group Title
Passwords are viewable when displaying the config.
CCI
(None)
Target Key
(None)
Documentable
No
Discussion

Many attacks on information systems and network devices are launched from within the network. Hence, it is imperative that all passwords are encrypted so they cannot be intercepted by viewing the console or printout of the configuration.

Fix Text

Configure the network devices to ensure passwords are not viewable when displaying configuration information.

Check Content

Review the network devices configuration to determine if passwords are viewable. If passwords are viewable in plaintext, this is a finding.

Responsibility

Information Assurance Officer