Details

When a user is authenticated remotely but is not mapped to a specific local account they will be mapped to this local user. If this is a local administrative account ensure only authorized users can be authenticated through AAA.

Solution

Edit the configuration and modify this line:n

aaa authorization map default-user

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system FireEye.

References

• 800-53|CM-6b.
• CSCv6|3.1

Source

• Tenable.com/audits