STIGQter: STIG Summary: Apache Server 2.4 UNIX Server Security Technical Implementation Guide Version: 3 Release: 3 Benchmark Date: 01 Jul 2026:

Expansion modules must be fully reviewed, tested, and signed before they can exist on a production Apache web server.

DISA Rule

SV-214238r1212181_rule

Vulnerability Number

V-214238

Group Title

SRG-APP-000131-WSR-000073

Rule Version

AS24-U1-000230

Severity

CAT II

CCI(s)

• CCI-003992 - Prevent the installation of organization-defined software and firmware components without verification that the component has been digitally signed using a certificate that is recognized and approved by the organization.

Weight

10

Fix Recommendation

Remove any unsigned modules and any modules that are not required for operation.

Check Contents

Enter the following command:

"httpd -M"

This will provide a list of the loaded modules. Validate that all displayed modules are required for operation.

If any module is not required for operation, this is a finding.

Note: The following modules are needed for basic web function and do not need to be reviewed:

core_module
http_module
so_module
mpm_prefork_module

For a complete list of signed Apache modules, review https://httpd.apache.org/docs/2.4/mod/.

Vulnerability Number

V-214238

Documentable

False

Rule Version

AS24-U1-000230

Severity Override Guidance

Enter the following command:

"httpd -M"

This will provide a list of the loaded modules. Validate that all displayed modules are required for operation.

If any module is not required for operation, this is a finding.

Note: The following modules are needed for basic web function and do not need to be reviewed:

core_module
http_module
so_module
mpm_prefork_module

For a complete list of signed Apache modules, review https://httpd.apache.org/docs/2.4/mod/.

Check Content Reference

M

Target Key

3996