STIGQter STIGQter: STIG Summary: Application Security and Development Security Technical Implementation Guide Version: 5 Release: 1 Benchmark Date: 23 Oct 2020:

The application must display the time and date of the users last successful logon.

DISA Rule

SV-222437r508029_rule

Vulnerability Number

V-222437

Group Title

SRG-APP-000075

Rule Version

APSC-DV-000580

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Design and configure the application to display the date and time when the user was last successfully granted access to the application.

Check Contents

Review the application documentation and interview the application administrator.

If the application does not provide a user interface, this requirement is not applicable.

Logon to the application as a test user and verify successful authentication by creating test data, navigating the application functionality or otherwise utilizing the application.

Note the date and time access was granted.

Log out of the application.

Re-authenticate to the application as the same user.

Validate the last logon date and time is displayed in the user interface.

If the date and time the user account was last granted access to the application is not displayed in the user interface, this is a finding.

Vulnerability Number

V-222437

Documentable

False

Rule Version

APSC-DV-000580

Severity Override Guidance

Review the application documentation and interview the application administrator.

If the application does not provide a user interface, this requirement is not applicable.

Logon to the application as a test user and verify successful authentication by creating test data, navigating the application functionality or otherwise utilizing the application.

Note the date and time access was granted.

Log out of the application.

Re-authenticate to the application as the same user.

Validate the last logon date and time is displayed in the user interface.

If the date and time the user account was last granted access to the application is not displayed in the user interface, this is a finding.

Check Content Reference

M

Target Key

4093

Comments