The KVM switch is not configured to require the user to login to the KVM switch to access the ISs attached.

From Keyboard, Video, Mouse Switch Security STIG

Associated with IA controls: IAIA-2, IAIA-1

SV-6904r1_rule The KVM switch is not configured to require the user to login to the KVM switch to access the ISs attached.

Vulnerability discussion

Without identification and authentication of the user accessing the network attached KVM switch anyone can access the ISs attached and if they have knowledge of a valid userid and password for the IS disrupt the system causing a denial of service or access sensitive data compromising that data.The IAO will ensure that the KVM switch is configured to require the user to login to the KVM switch to access the ISs attached. PKI authentication is acceptable and preferred to password authentication.

Check content

The rewivewe will, with the assistance of the IAO, try to access the network attached KVM switch without valid authentication

Fix text

Reconfigure the network attached KVM switch to require the users to login to the KVM switch prior to being allowed access to the ISs attached to the KVM switch.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.