← Back to Web Server Security Requirements Guide

V-264342

CAT II (Medium)

The web server must require users to be individually authenticated before granting access to the shared accounts or resources.

Rule ID

SV-264342r984371_rule

STIG

Web Server Security Requirements Guide

Version

V4R4

CCIs

CCI-004045

Discussion

Individual authentication prior to shared group authentication mitigates the risk of using group accounts or authenticators.

Check Content

Verify the web server is configured to require users to be individually authenticated before granting access to the shared accounts or resources.

If the web server is not configured to require users to be individually authenticated before granting access to the shared accounts or resources, this is a finding.

Fix Text

Configure the web server to require users to be individually authenticated before granting access to the shared accounts or resources.