STIGQter: STIG Summary: Container Platform Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

Container platform applications and Application Program Interfaces (API) used for nonlocal maintenance sessions must use FIPS-validated keyed-hash message authentication code (HMAC) to protect the integrity of nonlocal maintenance and diagnostic communications.

DISA Rule

SV-233207r599717_rule

Vulnerability Number

V-233207

Group Title

SRG-APP-000411

Rule Version

SRG-APP-000411-CTR-000995

Severity

CAT II

CCI(s)

• CCI-002890 - The information system implements cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications.

Weight

10

Fix Recommendation

Configure the container platform applications and APIs used for nonlocal maintenance sessions to use FIPS-validated HMAC to protect the integrity of nonlocal maintenance and diagnostic communications.

Check Contents

Validate that container platform applications and APIs used for nonlocal maintenance sessions are using FIPS-validated HMAC to protect the integrity of nonlocal maintenance and diagnostic communications.

If the sessions are not using FIPS-validated HMAC, this is a finding.

Vulnerability Number

V-233207

Documentable

False

Rule Version

SRG-APP-000411-CTR-000995

Severity Override Guidance

Validate that container platform applications and APIs used for nonlocal maintenance sessions are using FIPS-validated HMAC to protect the integrity of nonlocal maintenance and diagnostic communications.

If the sessions are not using FIPS-validated HMAC, this is a finding.

Check Content Reference

M

Target Key

5239

Comments