STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 3 Release: 5 Benchmark Date: 01 Jul 2026:

The Mainframe Product must remove all upgraded/replaced software components that are no longer required for operation after updated versions have been installed.

DISA Rule

SV-205589r961677_rule

Vulnerability Number

V-205589

Group Title

SRG-APP-000454

Rule Version

SRG-APP-000454-MFP-000343

Severity

CAT II

CCI(s)

• CCI-002617 - Remove previous versions of organization-defined software components after updated versions have been installed.

Weight

10

Fix Recommendation

Configure the Mainframe Product to remove all upgraded/replaced software components that are no longer required for operation.

Check Contents

Examine inventory of installed software components for the Mainframe Product.

If the Mainframe Product does not remove all upgraded/replaced software components that are no longer required for operation, this is a finding.

Vulnerability Number

V-205589

Documentable

False

Rule Version

SRG-APP-000454-MFP-000343

Severity Override Guidance

Examine inventory of installed software components for the Mainframe Product.

If the Mainframe Product does not remove all upgraded/replaced software components that are no longer required for operation, this is a finding.

Check Content Reference

M

Target Key

2906