documentation_complete: true

title: 'Enable Encrypted Passwords'

description: |-
    Password hashing should be enabled in all security realms
    where plain-text passwords are currently in use.

rationale: |-
    Failure to enable password hashing within a login module can result in
    plain-text exposure client passwords used for authentication.

severity: medium

identifiers:
    cce: ""

references:
    cis: ""
    disa: ""
    nist: 'SC-8, SC-9'

ocil_clause: 'encrypted passwords are not enable or in use'
