STIGQter: STIG Summary: IBM MQ Appliance V9.0 AS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 05 Jun 2017:

The MQ Appliance messaging server must install security-relevant software updates within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

DISA Rule

SV-89505r1_rule

Vulnerability Number

V-74831

Group Title

SRG-APP-000456-AS-000266

Rule Version

MQMH-AS-000810

Severity

CAT II

CCI(s)

• CCI-002605 - The organization installs security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

10

Fix Recommendation

Install the most recent organizationally proved firmware update available from the vendor.

Check Contents

From the MQ Appliance CLI, enter the following command:

show version

If the displayed version does not correspond to the most recent organizationally approved available firmware update, this is a finding.

Vulnerability Number

V-74831

Documentable

False

Rule Version

MQMH-AS-000810

Severity Override Guidance

From the MQ Appliance CLI, enter the following command:

show version

If the displayed version does not correspond to the most recent organizationally approved available firmware update, this is a finding.

Check Content Reference

M

Target Key

3239

Comments