The container platform must uniquely identify and authenticate users.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-233075 | SRG-APP-000148-CTR-000335 | SV-233075r1051115_rule | CCI-000764 | medium |
| Description | ||||
| The container platform requires user accounts to perform container platform tasks. These tasks may pertain to the overall container platform or may be component-specific, thus requiring users to authenticate against those specific components. To ensure accountability and prevent unauthenticated access, users must be identified and authenticated to prevent potential misuse and compromise of the system. | ||||
| STIG | Date | |||
| Container Platform Security Requirements Guide | 2025-05-15 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
IA-2
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.5.1
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.5.2
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000764
1.00
- DISA · 2 · disa_xccdf · related
Details
Check Text (C-233075r1051115_chk)
Review the container platform configuration to determine if users are uniquely identified and authenticated.
If users are not uniquely identified or are not authenticated, this is a finding.
Fix Text (F-35979r600713_fix)
Configure the container platform to uniquely identify and authenticate users.