STIGQter: STIG Summary: Application Programming Interface (API) Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

The API must encrypt sensitive cached data.

DISA Rule

SV-274607r1143640_rule

Vulnerability Number

V-274607

Group Title

SRG-APP-000231

Rule Version

SRG-APP-000231-API-000495

Severity

CAT I

CCI(s)

• CCI-001199 - Protects the confidentiality and/or integrity of organization-defined information at rest.

Weight

10

Fix Recommendation

Build or configure the API to encrypt sensitive data when cached.

Check Contents

Verify the API encrypts sensitive data when it is cached.

If the API does not encrypt sensitive cached data, this is a finding.

Vulnerability Number

V-274607

Documentable

False

Rule Version

SRG-APP-000231-API-000495

Severity Override Guidance

Verify the API encrypts sensitive data when it is cached.

If the API does not encrypt sensitive cached data, this is a finding.

Check Content Reference

M

Target Key

5703