STIGQter: STIG Summary: Application Server Security Requirements Guide Version: 3 Release: 1 Benchmark Date: 23 Oct 2020:

The application server must identify potentially security-relevant error conditions.

DISA Rule

SV-204773r508029_rule

Vulnerability Number

V-204773

Group Title

SRG-APP-000266

Rule Version

SRG-APP-000266-AS-000168

Severity

CAT II

CCI(s)

• CCI-001312 - The information system generates error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

Weight

10

Fix Recommendation

Configure the application server to identify potentially security-relevant error conditions on the server.

Check Contents

Review the application server configuration to determine if the system identifies potentially security-relevant error conditions on the server.

If this function is not performed, this is a finding.

Vulnerability Number

V-204773

Documentable

False

Rule Version

SRG-APP-000266-AS-000168

Severity Override Guidance

Review the application server configuration to determine if the system identifies potentially security-relevant error conditions on the server.

If this function is not performed, this is a finding.

Check Content Reference

M

Target Key

2900

Comments