Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-205849 High Windows Server 2019 must be maintained at a supported servicing level
V-253263 High Windows 11 systems must be maintained at a supported servicing level
V-220706 High Windows 10 systems must be maintained at a supported servicing level
V-205908 High Windows Server 2019 must prevent local accounts with blank passwords from being used from the net...
V-254446 High Windows Server 2022 must prevent local accounts with blank passwords from being used from the net...
V-254250 High Windows Server 2022 local volumes must use a format that supports NTFS attributes
V-205663 High Windows Server 2019 local volumes must use a format that supports NTFS attributes
V-253265 High Local volumes must be formatted using NTFS
V-220708 High Local volumes must be formatted using NTFS
V-260469 High Ubuntu 22.04 LTS must disable the x86 Ctrl-Alt-Delete key sequence
V-260650 High Ubuntu 22.04 LTS must implement NIST FIPS-validated cryptography to protect classified informatio...
V-254293 High Windows Server 2022 reversible password encryption must be disabled
V-205653 High Windows Server 2019 reversible password encryption must be disabled
V-253305 High Reversible password encryption must be disabled
V-220747 High Reversible password encryption must be disabled
V-254352 High Windows Server 2022 Autoplay must be turned off for nonvolume devices
V-205804 High Windows Server 2019 Autoplay must be turned off for non-volume devices
V-253386 High Autoplay must be turned off for non-volume devices
V-220827 High Autoplay must be turned off for non-volume devices
V-254354 High Windows Server 2022 AutoPlay must be disabled for all drives
V-205806 High Windows Server 2019 AutoPlay must be disabled for all drives
V-253388 High Autoplay must be disabled for all drives
V-220829 High Autoplay must be disabled for all drives
V-254353 High Windows Server 2022 default AutoRun behavior must be configured to prevent AutoRun commands
V-205805 High Windows Server 2019 default AutoRun behavior must be configured to prevent AutoRun commands
V-253387 High The default autorun behavior must be configured to prevent autorun commands
V-254500 High Windows Server 2022 debug programs user right must only be assigned to the Administrators group
V-205757 High Windows Server 2019 Debug programs: user right must only be assigned to the Administrators group
V-253490 High The "Debug programs" user right must only be assigned to the Administrators group
V-220967 High The Debug programs user right must only be assigned to the Administrators group
V-254391 High Windows Server 2022 permissions on the Active Directory data files must only allow System and Adm...
V-254392 High Windows Server 2022 Active Directory SYSVOL directory must have the proper access control permiss...
V-205740 High Windows Server 2019 Active Directory SYSVOL directory must have the proper access control permiss...
V-254441 High Windows Server 2022 must be running Credential Guard on domain-joined member servers
V-205907 High Windows Server 2019 must be running Credential Guard on domain-joined member servers
V-253370 High Credential Guard must be running on Windows 11 domain-joined systems
V-220812 High Credential Guard must be running on Windows 10 domain-joined systems
V-253284 High Structured Exception Handling Overwrite Protection (SEHOP) must be enabled
V-220727 High Structured Exception Handling Overwrite Protection (SEHOP) must be enabled
V-205850 High Windows Server 2019 must use an anti-virus program
V-253264 High The Windows 11 system must use an antivirus program
V-220707 High The Windows 10 system must use an anti-virus program
V-253275 High Internet Information System (IIS) or its subcomponents must not be installed on a workstation
V-220718 High Internet Information System (IIS) or its subcomponents must not be installed on a workstation
V-253382 High Solicited Remote Assistance must not be allowed
V-220823 High Solicited Remote Assistance must not be allowed
V-254466 High Windows Server 2022 must not allow anonymous enumeration of Security Account Manager (SAM) accounts
V-205914 High Windows Server 2019 must not allow anonymous enumeration of Security Account Manager (SAM) accounts
V-253453 High Anonymous enumeration of SAM accounts must not be allowed
V-220929 High Anonymous enumeration of SAM accounts must not be allowed
V-254467 High Windows Server 2022 must not allow anonymous enumeration of shares
V-205724 High Windows Server 2019 must not allow anonymous enumeration of shares
V-253454 High Anonymous enumeration of shares must be restricted
V-220930 High Anonymous enumeration of shares must be restricted
V-254475 High Windows Server 2022 LAN Manager authentication level must be configured to send NTLMv2 response o...
V-205919 High Windows Server 2019 LAN Manager authentication level must be configured to send NTLMv2 response o...
V-253462 High The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM
V-220938 High The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM
V-220937 High The system must be configured to prevent the storage of the LAN Manager hash of passwords
V-254469 High Windows Server 2022 must restrict anonymous access to Named Pipes and Shares
V-205725 High Windows Server 2019 must restrict anonymous access to Named Pipes and Shares
V-253456 High Anonymous access to Named Pipes and Shares must be restricted
V-220932 High Anonymous access to Named Pipes and Shares must be restricted
V-254474 High Windows Server 2022 must be configured to prevent the storage of the LAN Manager hash of passwords
V-205654 High Windows Server 2019 must be configured to prevent the storage of the LAN Manager hash of passwords
V-253461 High The system must be configured to prevent the storage of the LAN Manager hash of passwords
V-260469 High Ubuntu 22.04 LTS must disable the x86 Ctrl-Alt-Delete key sequence
V-260470 High Ubuntu 22.04 LTS, when booted, must require authentication upon booting into single-user and main...
V-260482 High Ubuntu 22.04 LTS must not have the "rsh-server" package installed
V-260483 High Ubuntu 22.04 LTS must not have the "telnet" package installed
V-260523 High Ubuntu 22.04 LTS must have SSH installed
V-260524 High Ubuntu 22.04 LTS must use SSH to protect the confidentiality and integrity of transmitted informa...
V-260539 High Ubuntu 22.04 LTS must disable the x86 Ctrl-Alt-Delete key sequence if a graphical user interface ...
V-260559 High Ubuntu 22.04 LTS must ensure only users who need access to security functions are part of sudo group
V-260570 High Ubuntu 22.04 LTS must not allow accounts configured with blank or null passwords
V-260571 High Ubuntu 22.04 LTS must not have accounts configured with blank or null passwords
V-260579 High Ubuntu 22.04 LTS must map the authenticated identity to the user or group account for PKI-based a...