5.Issue Title Account Enumeration
Severity: Medium
Description: There are unique error messages
for invalid ID and PW Vendor/TGCS recommendations:•SSH does provide single error message for invalid ID or
PW
•Control access to physical console:
•Enable Console
ID lockout to limit attempts4690 OS Penetration Test Results 6.Issue Title Predictable
User NamesSeverity: Medium
Description: IDs are too simple and easy to guess
Vendor/TGCS recommendations Implement a user procedure to create nontrivial IDs
4690 OS Penetration Test Results Case Study ConclusionThe findings were addressed in V6R4
or earlierIt is important to keep current with 4690 OS releases as security continues to evolve.
Please share with us feedback from security studies you have initiated.
Toshiba is prepared and ready to help you impalement 4690 Security Best Practices.