Title

BlackBerry 10 OS maximum number of consecutive unsuccessful unlock attempts must be less than 10. (Cat II impact)

Discussion

The recommended setting for the maximum number of consecutive unsuccessful unlock attempts is 10. In some environments, a lower number may be needed to provide greater protection of sensitive information. Allowing for configuration enables the local command to enforce greater protection when it is deemed necessary. If the limit is not configurable, then it is permissible for a site to procure and deploy devices that enforce the limit specified by the organization, so long as that limit does not exceed 10.

Check Content

From either the Work Space or Personal Space, navigate to "Settings >> BlackBerry Balance”. Under "Work Password", ensure the maximum value in the "Password attempt limit" drop down box is less than 10, otherwise, this is a finding.

Fix Text

On BlackBerry Device Service, set the IT Policy rule "Maximum Password Attempts" to be less than 10.

Additional Identifiers

Rule ID:

Vulnerability ID: V-47215

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.