documentation_complete: true


title: 'Remove telnet Clients'

description: |-
    The telnet client allows users to start connections to other systems via
    the telnet protocol.

rationale: |-
    The <tt>telnet</tt> protocol is insecure and unencrypted. The use
    of an unencrypted transmission medium could allow an unauthorized user
    to steal credentials. The <tt>ssh</tt> package provides an
    encrypted session and stronger security and is included in {{{ full_name }}}.

severity: low

identifiers:
    cce@rhel8: CCE-80849-3
    cce@rhel9: CCE-84146-0
    cce@rhel10: CCE-90545-5
    cce@sle12: CCE-91457-2
    cce@sle15: CCE-91434-1
    cce@sle16: CCE-96102-9
    cce@slmicro5: CCE-93898-5

references:
    cis@sle12: 2.3.4
    cis@sle15: 2.3.4
    cui: 3.1.13
    hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)
    iso27001-2013: A.8.2.3,A.13.1.1,A.13.2.1,A.13.2.3,A.14.1.2,A.14.1.3

ocil: '{{{ describe_package_remove(package="telnet") }}}'

template:
    name: package_removed
    vars:
        pkgname: telnet
