Network devices must provide a logoff capability for administrator-initiated communication sessions.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-217458 | HFFS-ND-000082 | SV-217458r961224_rule | Medium |
| Description |
| If an administrator cannot explicitly end a device management session, the session may remain open and be exploited by an attacker; this is referred to as a zombie session. |
| STIG | Date |
| HP FlexFabric Switch NDM Security Technical Implementation Guide | 2025-06-12 |
Details
| Check Text (C-18682r293049_chk) |
| Review the HP FlexFabric Switch configuration to determine if it provides a logoff capability for administrator-initiated communication sessions. [HP] display users Idx Line Idle Time Pid Type + 177 VTY 0 00:00:00 May 29 15:45:11 1011 SSH Following are more details. VTY 0 : User name: admin@system Location: 16.117.204.17 + : Current operation user. F : Current operation user works in async mode. If the HP FlexFabric Switch does not provide a logoff capability for these sessions, this is a finding. |
| Fix Text (F-18680r293050_fix) |
| Configure the HP FlexFabric Switch to provide a logoff capability for administrator-initiated communication sessions. [HP] Ctrl + z <HP> quit |