TMAegis
Другие правила для opnsense

TMA-OPNSENSE-2.4

Ensure all default accounts are either disabled or utilize strong passwords

КритическийУровень 1Ручная проверкаopnsense

Описание

Disable the known default accounts configured. Note: The default admin account must remain enabled for high availability synchronization to work. Disabling it could cause issues. Default accounts are accounts with predefined usernames and passwords that are typically included with software and hardware devices. Attackers often target default accounts because they are widely known and can be used to gain unauthorized access to a system. To prevent unauthorized access, all default accounts should either be disabled or have their passwords changed.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

In GUI: - Navigate to System > Access > Users - View the default users

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

In GUI: - Navigate to System > Access > Users - Remove any default users that are not used. Note: The default admin account must remain enabled for high availability synchronization to work. Disabling it could cause issues.

Свойства

Операционные системы
Любая
Теги
authopnsense
Источник
CIS OPNsense Benchmark v1.0.0 - 2.4 Ensure all default accounts are either disabled or utilize strong passwords