STIGQter: STIG Summary: z/OS CL/SuperSession for TSS Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 01 Oct 2025:

CL/SuperSession APPCLASS member is not configured in accordance with the proper security requirements.

DISA Rule

SV-224658r1145887_rule

Vulnerability Number

V-224658

Group Title

SRG-OS-000018

Rule Version

ZCLST043

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

The systems programmer and ISSO will ensure that the parameter options for member APPCLASS are coded to the below specifications.

Review the member APPCLASS in the TLVPARM DD statement concatenation of the CL/SuperSession STC procedure. (This member is located in SYS3.OMEGAMON.qualifier.RLSPARM.) Ensure all session manager security parameters and control options are in compliance according to the following:

VGWAPLST EXTERNAL=KLS

Check Contents

Review the member APPCLASS in the TLVPARM DD statement concatenation of the CL/Supersession STC procedure. (This member is located in SYS3.OMEGAMON.qualifier.RLSPARM.)

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCLS0043).

If the parameters for the member APPCLASS are configured as follows, this is not a finding.

VGWAPLST EXTERNAL=KLS

Vulnerability Number

V-224658

Documentable

False

Rule Version

ZCLST043

Severity Override Guidance

Review the member APPCLASS in the TLVPARM DD statement concatenation of the CL/Supersession STC procedure. (This member is located in SYS3.OMEGAMON.qualifier.RLSPARM.)

Automated Analysis
Refer to the following report produced by the z/OS Data Collection:

- PDI(ZCLS0043).

If the parameters for the member APPCLASS are configured as follows, this is not a finding.

VGWAPLST EXTERNAL=KLS

Check Content Reference

M

Target Key

4181