BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

APSC-DV-003280 Default passwords must be changed.

DISA STIG library V6R5
All changes in this version
first version loaded CAT I

Maps to SA-4(5) via CCI-003109

Title

Default passwords must be changed.

Control

Identify the application name and version and do an Internet search for the product name and the string "default password". If default passwords are found, attempt to authenticate with the published default passwords. If authentication is successful, this is a finding.

Discussion

Default passwords can easily be compromised by attackers allowing immediate access to the applications.

Related controls

CCI-003109

Fix

Configure the application to use strong authenticators instead of passwords when possible. Otherwise, change default passwords to a DoW-approved strength password and follow all guidance for passwords.