STIGQter: STIG Summary: Unified Endpoint Management Server Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

The UEM server must reveal error messages only to the Information System Security Manager (ISSM) and Information System Security Officer (ISSO).

DISA Rule

SV-234425r617355_rule

Vulnerability Number

V-234425

Group Title

SRG-APP-000267

Rule Version

SRG-APP-000267-UEM-000152

Severity

CAT II

CCI(s)

• CCI-001314 - The information system reveals error messages only to organization-defined personnel or roles.

Weight

10

Fix Recommendation

Configure the UEM server to reveal error messages only to the ISSM and ISSO.

Check Contents

Verify the UEM server reveals error messages only to the ISSM and ISSO.

If the UEM server does not reveal error messages only to the ISSM and ISSO, this is a finding.

Vulnerability Number

V-234425

Documentable

False

Rule Version

SRG-APP-000267-UEM-000152

Severity Override Guidance

Verify the UEM server reveals error messages only to the ISSM and ISSO.

If the UEM server does not reveal error messages only to the ISSM and ISSO, this is a finding.

Check Content Reference

M

Target Key

5269

Comments