STIGQter: STIG Summary: Application Programming Interface (API) Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

The API must authenticate remote commands.

DISA Rule

SV-274723r1143761_rule

Vulnerability Number

V-274723

Group Title

SRG-APP-000461

Rule Version

SRG-APP-000461-API-001075

Severity

CAT II

CCI(s)

• CCI-003747 - Implement organization-defined mechanisms to authenticate organization-defined remote commands.

Weight

10

Fix Recommendation

Build or configure the API to authenticate remote commands.

Check Contents

Verify the API authenticates remote commands.

If the API does not authenticate remote commands, this is a finding.

Vulnerability Number

V-274723

Documentable

False

Rule Version

SRG-APP-000461-API-001075

Severity Override Guidance

Verify the API authenticates remote commands.

If the API does not authenticate remote commands, this is a finding.

Check Content Reference

M

Target Key

5703