STIGQter: STIG Summary: Unified Endpoint Management Server Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 20 Nov 2020:

The UEM server must be configured to write to the server event log when invalid inputs are received.

DISA Rule

SV-234596r617355_rule

Vulnerability Number

V-234596

Group Title

SRG-APP-000447

Rule Version

SRG-APP-000447-UEM-000321

Severity

CAT II

CCI(s)

• CCI-002754 - The information system behaves in a predictable and documented manner that reflects organizational and system objectives when invalid inputs are received.

Weight

10

Fix Recommendation

Configure the UEM server to write to the server event log when invalid inputs are received.

Check Contents

Verify the UEM server writes to the server event log when invalid inputs are received.

If the UEM server does not write to the server event log when invalid inputs are received, this is a finding.

Vulnerability Number

V-234596

Documentable

False

Rule Version

SRG-APP-000447-UEM-000321

Severity Override Guidance

Verify the UEM server writes to the server event log when invalid inputs are received.

If the UEM server does not write to the server event log when invalid inputs are received, this is a finding.

Check Content Reference

M

Target Key

5269

Comments