Documentation - V-222414

Title

The application must automatically audit account modification.

Description

<VulnDiscussion>One way for an attacker to establish persistent access is for the attacker to modify or copy an existing account. Auditing of account modification is one method for mitigating this risk. A comprehensive account management process will ensure an audit trail documents the modification of application user accounts. Such a process greatly reduces the risk that accounts will be surreptitiously modified and provides logging that can be used for forensic purposes. To address account re...

Fix Text (Documentation Requirement)

Configure the application to write a log entry when a user account is modified. At a minimum, ensure account name, date and time of the event are recorded.