TMA-OPNSENSE-2.4
Ensure all default accounts are either disabled or utilize strong passwords
Описание
Disable the known default accounts configured. Note: The default admin account must remain enabled for high availability synchronization to work. Disabling it could cause issues. Default accounts are accounts with predefined usernames and passwords that are typically included with software and hardware devices. Attackers often target default accounts because they are widely known and can be used to gain unauthorized access to a system. To prevent unauthorized access, all default accounts should either be disabled or have their passwords changed.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
In GUI: - Navigate to System > Access > Users - View the default users
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
In GUI: - Navigate to System > Access > Users - Remove any default users that are not used. Note: The default admin account must remain enabled for high availability synchronization to work. Disabling it could cause issues.
Свойства
- Операционные системы
- Любая
- Теги
- authopnsense
- Источник
- CIS OPNsense Benchmark v1.0.0 - 2.4 Ensure all default accounts are either disabled or utilize strong passwords