STIGQter: STIG Summary: Application Programming Interface (API) Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

The API must require periodic reauthentication.

DISA Rule

SV-274672r1143705_rule

Vulnerability Number

V-274672

Group Title

SRG-APP-000389

Rule Version

SRG-APP-000389-API-000820

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Build or configure the API to require reauthentication periodically.

Check Contents

Verify the API requires periodic reauthentication.

If the API does not require reauthentication periodically, this is a finding.

Vulnerability Number

V-274672

Documentable

False

Rule Version

SRG-APP-000389-API-000820

Severity Override Guidance

Verify the API requires periodic reauthentication.

If the API does not require reauthentication periodically, this is a finding.

Check Content Reference

M

Target Key

5703