Security Technical Implementation Guides (STIGs)

Vulnerability ID	Severity	Description
V-254482	Medium	Windows Server 2022 User Account Control (UAC) approval mode for the built-in Administrator must ...
V-254485	Medium	Windows Server 2022 User Account Control (UAC) must automatically deny standard user requests for...
V-254488	Medium	Windows Server 2022 User Account Control (UAC) must run all administrators in Admin Approval Mode...
V-253380	Medium	Users must be prompted for a password on resume from sleep (on battery)
V-220821	Medium	Users must be prompted for a password on resume from sleep (on battery)
V-253381	Medium	The user must be prompted for a password on resume from sleep (plugged in)
V-220822	Medium	The user must be prompted for a password on resume from sleep (plugged in)
V-254367	Medium	Windows Server 2022 Remote Desktop Services must always prompt a client for passwords upon connec...
V-253404	Medium	Remote Desktop Services must always prompt a client for passwords upon connection
V-220850	Medium	Remote Desktop Services must always prompt a client for passwords upon connection
V-260558	Medium	Ubuntu 22.04 LTS must require users to reauthenticate for privilege escalation or when changing r...
V-254365	Medium	Windows Server 2022 must not save passwords in the Remote Desktop Client
V-253402	Medium	Passwords must not be saved in the Remote Desktop Client
V-220848	Medium	Passwords must not be saved in the Remote Desktop Client
V-254383	Medium	Windows Server 2022 Windows Remote Management (WinRM) service must not store RunAs credentials
V-253420	Medium	The Windows Remote Management (WinRM) service must not store RunAs credentials
V-220867	Medium	The Windows Remote Management (WinRM) service must not store RunAs credentials