Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-253385 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
V-220826 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
V-254351 Low Windows Server 2022 Application Compatibility Program Inventory must be prevented from collecting...
V-205691 Low Windows Server 2019 Application Compatibility Program Inventory must be prevented from collecting...
V-253441 Low The computer account password must not be prevented from being reset
V-220917 Low The computer account password must not be prevented from being reset
V-253447 Low Caching of logon credentials must be limited
V-220923 Low Caching of logon credentials must be limited
V-253442 Low The maximum age for machine account passwords must be configured to 30 days or less
V-220918 Low The maximum age for machine account passwords must be configured to 30 days or less
V-254335 Low Windows Server 2022 Internet Protocol version 6 (IPv6) source routing must be configured to the h...
V-205858 Low Windows Server 2019 Internet Protocol version 6 (IPv6) source routing must be configured to the h...
V-254336 Low Windows Server 2022 source routing must be configured to the highest protection level to prevent ...
V-205859 Low Windows Server 2019 source routing must be configured to the highest protection level to prevent ...
V-260472 Low Ubuntu 22.04 LTS must restrict access to the kernel message buffer
V-260476 Low Ubuntu 22.04 LTS must be configured so that the Advance Package Tool (APT) prevents the installat...
V-260479 Low Ubuntu 22.04 LTS must have the "chrony" package installed
V-260480 Low Ubuntu 22.04 LTS must not have the "systemd-timesyncd" package installed
V-260481 Low Ubuntu 22.04 LTS must not have the "ntp" package installed
V-260519 Low Ubuntu 22.04 LTS must, for networked systems, compare internal information system clocks at least...
V-260520 Low Ubuntu 22.04 LTS must synchronize internal information system clocks to the authoritative time so...
V-260521 Low Ubuntu 22.04 LTS must record time stamps for audit records that can be mapped to Coordinated Univ...
V-260549 Low Ubuntu 22.04 LTS must automatically lock an account until the locked account is released by an ad...
V-260550 Low Ubuntu 22.04 LTS must enforce a delay of at least four seconds between logon prompts following a ...
V-260552 Low Ubuntu 22.04 LTS must limit the number of concurrent sessions to ten for all accounts and/or acco...
V-260581 Low Ubuntu 22.04 LTS must be configured such that Pluggable Authentication Module (PAM) prohibits the...
V-260587 Low Ubuntu 22.04 LTS must have a crontab script running weekly to offload audit events of standalone ...
V-260592 Low Ubuntu 22.04 LTS audit event multiplexor must be configured to offload audit logs onto a differen...
V-260593 Low Ubuntu 22.04 LTS must alert the information system security officer (ISSO) and system administrat...
V-260595 Low Ubuntu 22.04 LTS must allocate audit record storage capacity to store at least one weeks' worth o...
V-260596 Low Ubuntu 22.04 LTS must immediately notify the system administrator (SA) and information system sec...
V-224836 Low Non-administrative accounts or groups must only have print permissions on printer shares
V-224862 Low The time service must synchronize with an appropriate DoD time source
V-224864 Low Secure Boot must be enabled on Windows Server 2016 systems
V-224865 Low Windows 2016 systems must have Unified Extensible Firmware Interface (UEFI) firmware and be confi...
V-224916 Low Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection le...
V-224917 Low Source routing must be configured to the highest protection level to prevent Internet Protocol (I...
V-224918 Low Windows Server 2016 must be configured to prevent Internet Control Message Protocol (ICMP) redire...
V-224919 Low Windows Server 2016 must be configured to ignore NetBIOS name release requests except from WINS s...
V-224931 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
V-224942 Low Turning off File Explorer heap termination on corruption must be disabled
V-224979 Low The directory service must be configured to terminate LDAP-based network connections to the direc...
V-205857 Low Windows Server 2019 must have Secure Boot enabled
V-220700 Low Secure Boot must be enabled on Windows 10 systems
V-254357 Low Windows Server 2022 Windows Update must not obtain updates from other PCs on the internet
V-205870 Low Windows Server 2019 Windows Update must not obtain updates from other PCs on the Internet
V-253394 Low Windows Update must not obtain updates from other PCs on the internet
V-220835 Low Windows Update must not obtain updates from other PCs on the internet
V-225037 Low The Windows dialog box title for the legal banner must be configured with the appropriate text
V-205856 Low Windows Server 2019 systems must have Unified Extensible Firmware Interface (UEFI) firmware and b...