Title

The container platform must prohibit the use of cached authenticators after an organization-defined time period. (Cat II impact)

Discussion

If cached authentication information is out of date, the validity of the authentication information may be questionable.

Check Content

Review the container platform configuration to determine if the platform is configured to prohibit the use of cached authenticators after an organization-defined time period. If the container platform is not configured to prohibit the use of cached authenticators after an organization-defined time period, this is a finding.

Fix Text

Configure the container platform to prohibit the use of cached authenticators after an organization-defined time period.

Additional Identifiers

Rule ID: SV-233200r961521_rule

Vulnerability ID: V-233200

Group Title: SRG-APP-000400

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.