STIGQter: STIG Summary: Web Server Security Requirements Guide Version: 4 Release: 5 Benchmark Date: 01 Jul 2026:

The web server must protect system resources and privileged operations from hosted applications.

DISA Rule

SV-206384r960963_rule

Vulnerability Number

V-206384

Group Title

SRG-APP-000141

Rule Version

SRG-APP-000141-WSR-000086

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Configure the privileges given to hosted applications to the minimum required for application operation.

Check Contents

Review the web server documentation and configuration to determine the access to server resources given to hosted applications.

If hosted applications have access to more system resources than needed for operation, this is a finding.

Vulnerability Number

V-206384

Documentable

False

Rule Version

SRG-APP-000141-WSR-000086

Severity Override Guidance

Review the web server documentation and configuration to determine the access to server resources given to hosted applications.

If hosted applications have access to more system resources than needed for operation, this is a finding.

Check Content Reference

M

Target Key

2910