UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The container platform must use multifactor authentication for local access to non-privileged accounts.


Overview

Finding ID Version Rule ID IA Controls Severity
V-233082 SRG-APP-000152-CTR-000370 SV-233082r879593_rule Medium
Description
To ensure accountability, prevent unauthenticated access, and prevent misuse of the system, non-privileged users must utilize multi-factor authentication for local access. Multifactor authentication is defined as using two or more factors to achieve authentication. Factors include: (i) Something a user knows (e.g., password/PIN); (ii) Something a user has (e.g., cryptographic identification device, token); or (iii) Something a user is (e.g., biometric). A non-privileged account is defined as an information system account with authorizations of a regular or non-privileged user. Local access is defined as access to an organizational information system by a user (or process acting on behalf of a user) communicating through a direct connection without the use of a network.
STIG Date
Container Platform Security Requirements Guide 2023-11-30

Details

Check Text ( C-36018r600733_chk )
Review the container platform configuration to determine if multifactor authentication is used for local access to non-privileged accounts.

If multifactor authentication for local access to non-privileged accounts is not being used, this is a finding.
Fix Text (F-35986r600734_fix)
Configure the container platform to use multifactor authentication for local access to non-privileged accounts.