PCI DSS 8.5 - PCI DSS Requirement 8.5

This PCI DSS V1.2 report is posted on the Internet to promote Version 3.0 of LJK/Security . The corresponding vulnerability report for your own system should be guarded more carefully, such as by being reviewed only from local HTML disk files rather than via a web server.
Return to Main Page
PCI DSS 8.5 - PCI DSS Requirement 8.5

PCI DSS V1.2 for Merchant

Findings Color Code
Compliant
Not assessed
Non-Compliant

PCI DSS 8.5.1

(AUDIT, AUTHORIZE, ALPROHIBIT)

(AUDIT, AUTHORIZE, ALREQUIRE)

(AUDIT, AUTHORIZE, AUPROHIBIT)

(AUDIT, AUTHORIZE, AUREQUIRE)

PCI DSS 8.5.1.a

(UAF, DISUSER, REQUIRED)

(UAF, PRIVLEVEL, ABSOLUTHI)

(UAF, PRIVLEVEL, ABSOLUTLO)

Manual Examination AUTHORIZATION_8_5_1_A_020

Manual Examination AUTHORIZATION_8_5_1_A_021

PCI DSS 8.5.2

Interview AUTHORIZATION_8_5_2_023

Manual Examination AUTHORIZATION_8_5_2_022

PCI DSS 8.5.3

(USAGE, EVADEPWD, PREEXPIRED)

(USAGE, EVADEPWD, SELF)

Interview AUTHORIZATION_8_5_3_025

Manual Examination AUTHORIZATION_8_5_3_024

PCI DSS 8.5.4

Manual Examination AUTHORIZATION_8_5_4_026

PCI DSS 8.5.5

(UAF, LASTLOGIN, EITHER)

PCI DSS 8.5.6

Manual Examination AUTHORIZATION_8_5_6_027

Manual Examination AUTHORIZATION_8_5_6_029

PCI DSS 8.5.7

Interview AUTHORIZATION_8_5_7_028

Interview AUTHORIZATION_8_5_7_030

PCI DSS 8.5.8

(TERM, AUTOLOGIN, ABSOLUTHI)

(TERM, AUTOLOGIN, ENTRY)

(TERM, AUTOLOGIN, NONCAPTIVE)

(TERM, AUTOLOGIN, NOPASSWORD)

(TERM, AUTOLOGIN, NOSUCHUSER)

(TERM, SYSPWD, PROHIBITED)

(TERM, SYSPWD, REQUIRED)

(UAF, AUTOLOGIN, PROHIBITED)

(UAF, AUTOLOGIN, REQUIRED)

(UAF, PROXY, MULTIUSER)

(UAF, PROXY, NOSUCHUSER)

(UAF, PROXY, WILDNODE)

(UAF, PROXY, WILDTARGET)

(UAF, PROXY, WILDUSER)

(USAGE, SYSTEMUSER, NOINTERACT)

(USAGE, SYSTEMUSER, NONETWORK)

(VMS, LGIPWDTMO, ABSOLUTHI)

(VMS, LGIPWDTMO, ABSOLUTLO)

(VMS, SYSTEMLGI, PROHIBITED)

(VMS, SYSTEMLGI, REQUIRED)

PCI DSS 8.5.9

(UAF, DISPWDFCHG, PROHIBITED)

(UAF, DISPWDFCHG, REQUIRED)

(UAF, LOCKPWD, PROHIBITED)

(UAF, LOCKPWD, REQUIRED)

(UAF, PWDLIFE, ABSOLUTHI)

PCI DSS 8.5.10

(UAF, PWDMINLEN, ABSOLUTLO)

PCI DSS 8.5.11

(UAF, DISPWDDIC, PROHIBITED)

(UAF, DISPWDDIC, REQUIRED)

(UAF, PWDGUESS, TRIES)

(USAGE, EVADEPWD, DICTIONARY)

(VMS, PWDPOLICY, LOADPWDPRO)

(VMS, PWDPOLICY, PWDEXEPRO)

Manual Examination PASSWORD_POLICY_8_5_11_020

PCI DSS 8.5.12

(UAF, DISPWDHIS, PROHIBITED)

(UAF, DISPWDHIS, REQUIRED)

(USAGE, EVADEPWD, HISTORY)

(VMS, PWDHISTORY, MAXLIFE)

(VMS, PWDHISTORY, MAXLIMIT)

(VMS, PWDHISTORY, MINLIFE)

(VMS, PWDHISTORY, MINLIMIT)

PCI DSS 8.5.13

(VMS, LGIBRKLIM, ABSOLUTHI)

(VMS, LGIBRKLIM, ABSOLUTLO)

PCI DSS 8.5.14

(VMS, LGIBRKTMO, ABSOLUTHI)

(VMS, LGIBRKTMO, ABSOLUTLO)

(VMS, LGIHIDTIM, ABSOLUTHI)

(VMS, LGIHIDTIM, ABSOLUTLO)

PCI DSS 8.5.15

(DISK, AUTOLOCK, DECWINDOWS)

(TERM, DISCONNECT, PROHIBITED)

(TERM, DISCONNECT, REQUIRED)

(UAF, DISRECON, PROHIBITED)

(UAF, DISRECON, REQUIRED)

Manual Examination AUTO_DISCONNECT_8_5_15_030

Manual Examination AUTO_DISCONNECT_8_5_15_031

PCI DSS 8.5.16.a

(UAF, PWDNULL, CAPTIVE)

(UAF, PWDNULL, MUSTAUTO)

(UAF, PWDNULL, MUSTLOCK)

(UAF, PWDNULL, PRIMAXPRIV)

(UAF, PWDNULL, PRIPROHIB)

(UAF, PWDNULL, PRIREQUIRE)

Manual Examination DATABASE_8_5_16_040

PCI DSS 8.5.16.b

Manual Examination DATABASE_8_5_16_041

This PCI DSS V1.2 report is posted on the Internet to promote Version 3.0 of LJK/Security . The corresponding vulnerability report for your own system should be guarded more carefully, such as by being reviewed only from local HTML disk files rather than via a web server.