Network devices must provide a logoff capability for administrator-initiated communication sessions.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-217458 | HFFS-ND-000082 | SV-217458r961224_rule | CCI-002363 | medium |
| Description | ||||
| If an administrator cannot explicitly end a device management session, the session may remain open and be exploited by an attacker; this is referred to as a zombie session. | ||||
| STIG | Date | |||
| HP FlexFabric Switch NDM Security Technical Implementation Guide | 2025-06-12 | |||
Related Frameworks
2 paths across 2 frameworks
Related Frameworks
NIST 800-531 mapping
AC-12(1)
1.00
- DISA · V1R4 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI1 mapping
CCI-002363
1.00
- DISA · V1R4 · disa_xccdf · related
Details
Check Text (C-217458r961224_chk)
Review the HP FlexFabric Switch configuration to determine if it provides a logoff capability for administrator-initiated communication sessions.
[HP] display users
Idx Line Idle Time Pid Type
+ 177 VTY 0 00:00:00 May 29 15:45:11 1011 SSH
Following are more details.
VTY 0 :
User name: admin@system
Location: 16.117.204.17
+ : Current operation user.
F : Current operation user works in async mode.
If the HP FlexFabric Switch does not provide a logoff capability for these sessions, this is a finding.
Fix Text (F-18680r293050_fix)
Configure the HP FlexFabric Switch to provide a logoff capability for administrator-initiated communication sessions.
[HP] Ctrl + z
<HP> quit