This is not the latest version of the STIG. This is provided for archival purposes. See the latest STIG.

RHEL 10 must have the "openssh-clients" package installed.

STIG ID: RHEL-10-200722  |  SRG: SRG-OS-000095-GPOS-00049 |  Severity: medium (CAT II)  |  CCI: CCI-000381 |  Vulnerability Id: V-281003

Vulnerability Discussion

This package includes utilities to make encrypted connections and transfer files securely to Secure Shell (SSH) servers.

Check

Verify RHEL 10 has the "openssh-clients" package installed with the following command:

$ sudo dnf list --installed openssh-clients
Installed Packages
openssh-clients.x86_64 9.9p1-7.el10_0 @anaconda

If the "openssh-clients" package is not installed, this is a finding.

Fix

Configure RHEL 10 to have the "openssh-clients" package installed with the following command:

$ sudo dnf -y install openssh-clients
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.