Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
AlmaLinux OS 9 must not have any telnet packages installed.
Description
Discussion Text
Passwords must be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised.
A telnet server provides an unencrypted remote access mechanism that does not protect the confidentiality of user credentials or the remote session.
If a privileged user were to log on using this service, the privileged user password could be compromised. SSH or other encrypted session methods must be used instead.
Removing the server and client packages prevents inbound and outbound communications from being compromised.
A telnet server provides an unencrypted remote access mechanism that does not protect the confidentiality of user credentials or the remote session.
If a privileged user were to log on using this service, the privileged user password could be compromised. SSH or other encrypted session methods must be used instead.
Removing the server and client packages prevents inbound and outbound communications from being compromised.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.