STIGQter: STIG Summary: IBM WebSphere Liberty Server Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Apr 2026:

The WebSphere Liberty Server must prohibit or restrict the use of nonsecure ports, protocols, modules, and/or services as defined in the PPSM CAL and vulnerability assessments.

DISA Rule

SV-250332r1043177_rule

Vulnerability Number

V-250332

Group Title

SRG-APP-000142-AS-000014

Rule Version

IBMW-LS-000370

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Every port listed in ${server.config.dir}/server.xml must be registered with PPSM.

Refer to the PPSM website on https://cyber.mil/ppsm for information.

Check Contents

As a privileged user with access to the server.xml file, review the file and identify all TCPIP ports used by the server.

EXAMPLE:
grep -I "port=" server.xml

httpsPort="9443">

Review the PPSM site for the list of approved ports. If any of the ports used are not registered with PPSM, this is a finding.

Vulnerability Number

V-250332

Documentable

False

Rule Version

IBMW-LS-000370

Severity Override Guidance

As a privileged user with access to the server.xml file, review the file and identify all TCPIP ports used by the server.

EXAMPLE:
grep -I "port=" server.xml

httpsPort="9443">

Review the PPSM site for the list of approved ports. If any of the ports used are not registered with PPSM, this is a finding.

Check Content Reference

M

Target Key

5424