STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The VMM must implement cryptographic mechanisms to prevent unauthorized disclosure of all information at rest on all VMM components.

DISA Rule

SV-207495r958872_rule

Vulnerability Number

V-207495

Group Title

SRG-OS-000405

Rule Version

SRG-OS-000405-VMM-001660

Severity

CAT II

CCI(s)

• CCI-002476 - Implement cryptographic mechanisms to prevent unauthorized disclosure of organization-defined information at rest on organization-defined system components.

Weight

10

Fix Recommendation

Configure the VMM to implement cryptographic mechanisms to prevent unauthorized disclosure of all information at rest on all VMM components.

Check Contents

Verify the VMM implements cryptographic mechanisms to prevent unauthorized disclosure of all information at rest on all VMM components.

If it does not, this is a finding.

Vulnerability Number

V-207495

Documentable

False

Rule Version

SRG-OS-000405-VMM-001660

Severity Override Guidance

Verify the VMM implements cryptographic mechanisms to prevent unauthorized disclosure of all information at rest on all VMM components.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2924