STIGQter: STIG Summary: VMW vRealize Automation 7.x vAMI Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

The vAMI must not contain any unnecessary functions and only provide essential capabilities.

DISA Rule

SV-100867r1_rule

Vulnerability Number

V-90217

Group Title

SRG-APP-000141-AS-000095

Rule Version

VRAU-VA-000185

Severity

CAT I

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Remove all tutorials, examples, and sample code.

Check Contents

Review the vAMI directories and files.

Determine if there are any tutorials, examples, or sample code.

If any tutorials, examples, or sample code is present, this is a finding.

Vulnerability Number

V-90217

Documentable

False

Rule Version

VRAU-VA-000185

Severity Override Guidance

Review the vAMI directories and files.

Determine if there are any tutorials, examples, or sample code.

If any tutorials, examples, or sample code is present, this is a finding.

Check Content Reference

M

Target Key

3449

Comments