V-206444
Web Server Security Requirements Guide
Title
All accounts installed with the web server software and tools must have passwords assigned and default passwords changed.
Description
<VulnDiscussion>During installation of the web server software, accounts are created for the web server to operate properly. The accounts installed can have either no password installed or a default password, which will be known and documented by the vendor and the user community. The first things an attacker will try when presented with a login screen are the default user identifiers with default passwords. Installed applications may also install accounts with no password, making the login eve...
Fix Text (Documentation Requirement)
Set passwords for non-service/system accounts containing no passwords and change the passwords for accounts which still have default passwords.