Title

Network devices must be configured to ensure passwords are not viewable when displaying configuration information. (Cat I impact)

Discussion

Many attacks on information systems and network devices are launched from within the network. Hence, it is imperative that all passwords are encrypted so they cannot be intercepted by viewing the console or printout of the configuration.

Check Content

Review the network devices configuration to determine if passwords are viewable. If passwords are viewable in plaintext, this is a finding.

Fix Text

Configure the network devices to ensure passwords are not viewable when displaying configuration information.

Additional Identifiers

Rule ID:

Vulnerability ID: V-3062

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.