STIGQter: STIG Summary: Mainframe Product Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 24 Jan 2020:

The Mainframe Product must reveal full-text detail error messages only to system programmers and/or security administrators.

DISA Rule

SV-82969r1_rule

Vulnerability Number

V-68479

Group Title

SRG-APP-000267-MFP-000335

Rule Version

SRG-APP-000267-MFP-000335

Severity

CAT II

CCI(s)

• CCI-001314 - The information system reveals error messages only to organization-defined personnel or roles.

Weight

10

Fix Recommendation

Configure the Mainframe Product to restrict full text detailed error message to system programmers and/or security administrators only.

Check Contents

Examine product documentation and code.

If full text detailed error message are not restricted to system programmers and/or security administrators, this is a finding.

Vulnerability Number

V-68479

Documentable

False

Rule Version

SRG-APP-000267-MFP-000335

Severity Override Guidance

Examine product documentation and code.

If full text detailed error message are not restricted to system programmers and/or security administrators, this is a finding.

Check Content Reference

M

Target Key

3061

Comments