STIGQter: STIG Summary: Ivanti EPMM Server Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

The Ivanti EPMM server must be maintained at a supported version.

DISA Rule

SV-251418r1004745_rule

Vulnerability Number

V-251418

Group Title

SRG-APP-000456-UEM-000330

Rule Version

IMIC-11-010800

Severity

CAT I

CCI(s)

CCI-002605 - Install security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

Fix Recommendation

Update Core to the most current version. If using the cloud version of Core, this requirement is automatically met.

Check Contents

Verify the Core server version is a supported version. This requirement is Not Applicable for the cloud version of Core.

Find the list of currently supported on-prem versions of Core server here: https://help.ivanti.com/mi/help/en_us/EML/3.16.1/rni/Content/EmailPlusiOSReleaseNotes/Support_and_compatibilit.htm

Log onto the Core console and determine the installed version of Core:
1. Click on the round person icon in the top right corner of the Core console.
2. In the drop-down menu, select "About".
3. View the version of Core that is installed.
4. Verify the version is a supported version.

If the installed version of the Core server is not a supported version, this is a finding.

Vulnerability Number

V-251418

Documentable

False

Rule Version

IMIC-11-010800

Severity Override Guidance

Check Content Reference

Target Key

5445