TMA-OPNSENSE-2.4
Ensure all default accounts are either disabled or utilize strong passwords
Description
Disable the known default accounts configured. Note: The default admin account must remain enabled for high availability synchronization to work. Disabling it could cause issues. Default accounts are accounts with predefined usernames and passwords that are typically included with software and hardware devices. Attackers often target default accounts because they are widely known and can be used to gain unauthorized access to a system. To prevent unauthorized access, all default accounts should either be disabled or have their passwords changed.
Méthode de vérification
Méthode d'audit: Revue manuelle
Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.
In GUI: - Navigate to System > Access > Users - View the default users
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
In GUI: - Navigate to System > Access > Users - Remove any default users that are not used. Note: The default admin account must remain enabled for high availability synchronization to work. Disabling it could cause issues.
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- authopnsense
- Référence
- CIS OPNsense Benchmark v1.0.0 - 2.4 Ensure all default accounts are either disabled or utilize strong passwords