STIGQter: STIG Summary: SPEC Innovations Innoslate 4.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 08 Sep 2022:

Innoslate must initiate a session lock after a 15-minute period of inactivity.

DISA Rule

SV-254086r845234_rule

Vulnerability Number

V-254086

Group Title

SRG-APP-000003

Rule Version

SPEC-IN-000015

Severity

CAT II

CCI(s)

CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.
CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

Fix Recommendation

1. Enter the web.xml file located at C:\Innoslate4\apache-tomcat\webapps\Innoslate4\WEB-INF.
2. Search (Ctrl+f) for "session-timeout" object (typically found on line 8).
3. Set the time to 15 minutes.
4. Save.
5. Restart the service.

Check Contents

1. Enter the web.xml file located at C:\Innoslate4\apache-tomcat\webapps\Innoslate4\WEB-INF.
2. Search (Ctrl+f) for "session-timeout" object (typically found on line 8).
3. Verify time is set to 15 minutes, if not , this is a finding.

Vulnerability Number

V-254086

Documentable

False

Rule Version

SPEC-IN-000015

Severity Override Guidance

1. Enter the web.xml file located at C:\Innoslate4\apache-tomcat\webapps\Innoslate4\WEB-INF.
2. Search (Ctrl+f) for "session-timeout" object (typically found on line 8).
3. Verify time is set to 15 minutes, if not , this is a finding.

Check Content Reference

Target Key

5481