documentation_complete: true

title: 'Ensure Default Roles Have Been Removed'

description: |-
    Remove, rename, or comment out the default roles
    defined in .properties files.

rationale: |-
    Default configurations are commonly leveraged by attackers to gain
    entry into closed systems. Removing, renaming, or commenting out
    default roles makes malicious exploitation more complex.

severity: medium

identifiers:
    cce: ""

references:
    cis: ""
    disa: ""
    nist: IA-5

ocil_clause: 'the default user roles still exist'
