STIGQter: STIG Summary: Kubernetes Security Technical Implementation Guide Version: 2 Release: 6 Benchmark Date: 01 Apr 2026:

Kubernetes dashboard must not be enabled.

DISA Rule

SV-242395r1137639_rule

Vulnerability Number

V-242395

Group Title

SRG-APP-000033-CTR-000095

Rule Version

CNTR-K8-000420

Severity

CAT II

CCI(s)

CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

Fix Recommendation

Delete the Kubernetes dashboard deployment with the following command:

kubectl delete deployment kubernetes-dashboard --namespace=kube-system

Check Contents

From the Control Plane, run the command:

kubectl get pods --all-namespaces -l k8s-app=kubernetes-dashboard

If any resources are returned, this is a finding.

Vulnerability Number

V-242395

Documentable

False

Rule Version

CNTR-K8-000420

Severity Override Guidance

From the Control Plane, run the command:

kubectl get pods --all-namespaces -l k8s-app=kubernetes-dashboard

If any resources are returned, this is a finding.

Check Content Reference

Target Key

5376