UCF STIG Viewer Logo

Repeated password characters must be disallowed for the Good app.


Finding ID Version Rule ID IA Controls Severity
V-24991 WIR-WMS-GD-009-04 SV-30824r2_rule ECWN-1 IAIA-1 Low
Repeated password characters reduces the strength of a password to withstand attacks by password hacking tools, which could lead to unauthorized access to the smartphone and exposure to sensitive DoD data.
Good Mobility Suite Server (Android OS) Security Technical Implementation Guide 2011-12-14


Check Text ( C-31244r2_chk )
This check is not applicable if “Authenticate with CAC PIN” is checked.

This is a Good security policy set check. Recommend all checks related to Good security policy set rules be reviewed using the following procedure.

1. Make a list of all Good security policy sets assigned to smartphone user accounts on the Good server using the following procedure:

-Have the SA identify any non STIG/ISCG-compliant policy sets and STIG/ISCG-compliant policy sets on the server.
--Log into the Good Mobile Control console.
--Click on the Policies tab.
--View all policy sets on the server.

-Note: STIG-compliant policy sets should be identified as such in the policy title. Examples are as follows: ISCG_iOS_Policy_Set, STIG_WM6-5_Policy_Set, or STIG_Android_Policy_Set. It is recommended that all non-STIG/ISCG policy sets be deleted.

2. Select each policy set users are assigned to, and in turn, verify the required settings are in the policy set.

-Note: If there is a finding, note the name of the non STIG/ISCG-compliant policy set in the Findings Details section in VMS/Component Provided Tracking Database.

-Launch the Good Mobile Control Web console and click on the Policies tab.
-Select the policy set for the smartphone and click on Handheld Authentication on the left side.

-Verify “Disallow repeated characters after” is set to 1 or 2.

Mark as a finding if “Disallow repeated characters after” is not set to 1 or 2.
Fix Text (F-27632r1_fix)
Disallow repeated password characters.