STIGQter: STIG Summary: Web Server Security Requirements Guide Version: 2 Release: 3 Benchmark Date: 26 Apr 2019:

The web server must protect system resources and privileged operations from hosted applications.

DISA Rule

SV-54280r3_rule

Vulnerability Number

V-41703

Group Title

SRG-APP-000141-WSR-000086

Rule Version

SRG-APP-000141-WSR-000086

Severity

CAT II

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Configure the privileges given to hosted applications to the minimum required for application operation.

Check Contents

Review the web server documentation and configuration to determine the access to server resources given to hosted applications.

If hosted applications have access to more system resources than needed for operation, this is a finding.

Vulnerability Number

V-41703

Documentable

False

Rule Version

SRG-APP-000141-WSR-000086

Severity Override Guidance

Review the web server documentation and configuration to determine the access to server resources given to hosted applications.

If hosted applications have access to more system resources than needed for operation, this is a finding.

Check Content Reference

M

Target Key

2557

Comments