STIGQter: STIG Summary: Mirantis Kubernetes Engine Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Lifetime Minutes and Renewal Threshold Minutes Login Session Controls on MKE must be set.

DISA Rule

SV-260903r1015767_rule

Vulnerability Number

V-260903

Group Title

SRG-APP-000190-CTR-000500

Rule Version

CNTR-MK-000940

Severity

CAT II

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.
• CCI-004895 - Permit users to invoke the trusted communications path for communications between the user and the organization-defined security functions, including at a minimum, authentication and re-authentication.
• CCI-002007 - Prohibit the use of cached authenticators after an organization-defined time period.

Weight

10

Fix Recommendation

Log in to the MKE web UI and navigate to admin >> Admin Settings >> Authentication & Authorization.

- Below Lifetime Minutes, enter "10".
- Below Renewal Threshold, enter "0".
- Click "Save".

Check Contents

Log in to the MKE web UI and navigate to admin >> Admin Settings >> Authentication & Authorization.

Ensure that "Lifetime Minutes" is set to "10" and "Renewal Threshold Minutes" is set to "0".

If these settings are not configured as specified, this is a finding.

Vulnerability Number

V-260903

Documentable

False

Rule Version

CNTR-MK-000940

Severity Override Guidance

Log in to the MKE web UI and navigate to admin >> Admin Settings >> Authentication & Authorization.

Ensure that "Lifetime Minutes" is set to "10" and "Renewal Threshold Minutes" is set to "0".

If these settings are not configured as specified, this is a finding.

Check Content Reference

M

Target Key

5595