STIGQter: STIG Summary: Application Server Security Requirements Guide Version: 3 Release: 1 Benchmark Date: 23 Oct 2020:

The application server must provide access logging that ensures users who are granted a privileged role (or roles) have their privileged activity logged.

DISA Rule

SV-204785r508029_rule

Vulnerability Number

V-204785

Group Title

SRG-APP-000343

Rule Version

SRG-APP-000343-AS-000030

Severity

CAT II

CCI(s)

• CCI-002234 - The information system audits the execution of privileged functions.

Weight

10

Fix Recommendation

Configure the application server to log privileged activity.

Check Contents

Review application server documentation and log configuration to verify the application server logs privileged activity.

If the application server is not configured to log privileged activity, this is a finding.

Vulnerability Number

V-204785

Documentable

False

Rule Version

SRG-APP-000343-AS-000030

Severity Override Guidance

Review application server documentation and log configuration to verify the application server logs privileged activity.

If the application server is not configured to log privileged activity, this is a finding.

Check Content Reference

M

Target Key

2900

Comments