Documentation - V-222413

Title

The application must automatically audit account creation.

Description

<VulnDiscussion>Once an attacker establishes initial access to a system, the attacker often attempts to create a persistent method of re-establishing access. One way to accomplish this is for the attacker to simply create a new account. Auditing of account creation is one method for mitigating this risk. A comprehensive account management process will ensure an audit trail documents the creation of application user accounts and, as required, notifies administrators and/or application owners exis...

Fix Text (Documentation Requirement)

Configure the application to write a log entry when a new user account is created. At a minimum, ensure account name, date and time of the event are recorded.