UCF STIG Viewer Logo

The Photon operating system must store only encrypted representations of passwords.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239098 PHTN-67-000026 SV-239098r675102_rule Medium
Description
Passwords must be protected at all times via strong, one-way encryption. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised. If they are encrypted with a weak cipher, those passwords are much more vulnerable to offline brute forcing attacks.
STIG Date
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide 2022-01-03

Details

Check Text ( C-42309r675100_chk )
At the command line, execute the following command:

# grep SHA512 /etc/login.defs|grep -v "#"

Expected result:

ENCRYPT_METHOD SHA512

If there is no output or if the output does match the expected result, this is a finding.
Fix Text (F-42268r675101_fix)
Open /etc/login.defs with a text editor.

Add or replace the ENCRYPT_METHOD line as follows:

ENCRYPT_METHOD SHA512