Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Dragos Platform must only allow local administrative and service user accounts.
Description
Discussion Text
Only two default UI accounts facilitate the initial setup and configuration of the platform. These accounts provide immediate access to the system, allowing administrators to quickly get the system up and running without needing to create new user accounts during the initial installation phase.
During maintenance, updates, or support operations, default accounts allow vendor support teams to access the system without needing to manage a variety of customer-specific accounts. This can streamline support activities and reduce downtime.
Default accounts passwords must be changed and protected so they cannot be exploited by attackers to gain unauthorized access to the system.
Satisfies: SRG-APP-000080, SRG-APP-000234
During maintenance, updates, or support operations, default accounts allow vendor support teams to access the system without needing to manage a variety of customer-specific accounts. This can streamline support activities and reduce downtime.
Default accounts passwords must be changed and protected so they cannot be exploited by attackers to gain unauthorized access to the system.
Satisfies: SRG-APP-000080, SRG-APP-000234
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.