STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

AIX must remove all software components after updated versions have been installed.

DISA Rule

SV-215336r508663_rule

Vulnerability Number

V-215336

Group Title

SRG-OS-000437-GPOS-00194

Rule Version

AIX7-00-003028

Severity

CAT II

CCI(s)

• CCI-002617 - The organization removes organization-defined software components (e.g., previous versions) after updated versions have been installed.

Weight

10

Fix Recommendation

Run the following command to commit any applied components:
# installp -c all

Check Contents

Run the following command to check any installed components that are in APPLY state:
# lslpp -cl | grep :APPLIED:

If the command returns any entries, this is a finding.

Vulnerability Number

V-215336

Documentable

False

Rule Version

AIX7-00-003028

Severity Override Guidance

Run the following command to check any installed components that are in APPLY state:
# lslpp -cl | grep :APPLIED:

If the command returns any entries, this is a finding.

Check Content Reference

M

Target Key

4012

Comments