STIGQter STIGQter: STIG Summary: Red Hat Ansible Automation Controller Web Server Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 05 Jan 2026:

The Automation Controller NGINX web server must limit the character set used for data entry.

DISA Rule

SV-256957r1155090_rule

Vulnerability Number

V-256957

Group Title

SRG-APP-000251-WSR-000157

Rule Version

APWS-AT-000610

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

As an SA for each Automation Controller NGINX web server, verify the NGINX web server configuration file in use is located at '/etc/nginx/nginx.conf'

NGINXCONF=`nginx -V 2>&1 | tr ' ' '\n' | sed -ne '/conf-path/{s/.*conf-path=\(.*\)/\1/;p}' ` ;

Add the directive to the NGINX configuration to force a required charset.

sed -i '/location/i charset_required; ' $NGINXCONF

Reload the NGINX server configurations for all NGINX processes.

$ pkill -HUP nginx

Check Contents

As a system administrator (SA) for each Automation Controller NGINX web server, verify the configuration requires a charset is mandatory.

grep 'charset_required' "$(nginx -V 2>&1 | tr ' ' '\n' | sed -ne '/conf-path/{s/.*conf-path=\(.*\)/\1/;p}')" || echo "FAILED"

If "FAILED" is displayed, this is a finding.

Vulnerability Number

V-256957

Documentable

False

Rule Version

APWS-AT-000610

Severity Override Guidance

As a system administrator (SA) for each Automation Controller NGINX web server, verify the configuration requires a charset is mandatory.

grep 'charset_required' "$(nginx -V 2>&1 | tr ' ' '\n' | sed -ne '/conf-path/{s/.*conf-path=\(.*\)/\1/;p}')" || echo "FAILED"

If "FAILED" is displayed, this is a finding.

Check Content Reference

M

Target Key

5535