Navigate

Check: APPL-13-003012

Apple macOS 13 (Ventura) STIG: APPL-13-003012 (in versions v1 r4 through v1 r1)

Title

The macOS system must be configured to prevent displaying password hints. (Cat II impact)

Discussion

Password hints leak information about passwords in use and can lead to loss of confidentiality.

Check Content

Verify the macOS system is configured to prevent displaying passwords hints with the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep "RetriesUntilHint" RetriesUntilHint = 0; If "RetriesUntilHint" is not set to "0", this is a finding.

Fix Text

Configure the macOS system to prevent displaying password hints by installing the "Login Window Policy" configuration profile.

Additional Identifiers

Rule ID: SV-257231r905326_rule

Vulnerability ID: V-257231

Group Title: SRG-OS-000480-GPOS-00227

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000366	The organization implements the security configuration settings.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-6	Configuration Settings