STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The VMM must prohibit user installation of software without explicit privileged status.

DISA Rule

SV-207468r984239_rule

Vulnerability Number

V-207468

Group Title

SRG-OS-000362

Rule Version

SRG-OS-000362-VMM-001390

Severity

CAT II

CCI(s)

• CCI-003980 - Allow user installation of software only with explicit privileged status.

Weight

10

Fix Recommendation

Configure the VMM to prohibit user installation of software or guest VMs without explicit privileged status.

Check Contents

Verify the VMM prohibits user installation of software or guest VMs without explicit privileged status.

If it does not, this is a finding.

Vulnerability Number

V-207468

Documentable

False

Rule Version

SRG-OS-000362-VMM-001390

Severity Override Guidance

Verify the VMM prohibits user installation of software or guest VMs without explicit privileged status.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2924