TMA-OPNSENSE-2.4
Ensure all default accounts are either disabled or utilize strong passwords
Description
Disable the known default accounts configured. Note: The default admin account must remain enabled for high availability synchronization to work. Disabling it could cause issues. Default accounts are accounts with predefined usernames and passwords that are typically included with software and hardware devices. Attackers often target default accounts because they are widely known and can be used to gain unauthorized access to a system. To prevent unauthorized access, all default accounts should either be disabled or have their passwords changed.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
In GUI: - Navigate to System > Access > Users - View the default users
How it is fixed
Fix method: Guidance or infrastructure patch
In GUI: - Navigate to System > Access > Users - Remove any default users that are not used. Note: The default admin account must remain enabled for high availability synchronization to work. Disabling it could cause issues.
Properties
- Operating systems
- Any
- Tags
- authopnsense
- Reference
- CIS OPNsense Benchmark v1.0.0 - 2.4 Ensure all default accounts are either disabled or utilize strong passwords