STIGQter: STIG Summary: VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

HAProxy must not be started with the debug switch.

DISA Rule

SV-99829r1_rule

Vulnerability Number

V-89179

Group Title

SRG-APP-000266-WSR-000160

Rule Version

VRAU-HA-000320

Severity

CAT II

CCI(s)

• CCI-001312 - The information system generates error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

Weight

10

Fix Recommendation

Restart the HAProxy without the debug command line argument, which is "-d".

Check Contents

At the command prompt, execute the following command:

ps aux | grep '[h]aproxy' | grep '\s\-d\s'

If the command returns any value, this is a finding.

Vulnerability Number

V-89179

Documentable

False

Rule Version

VRAU-HA-000320

Severity Override Guidance

At the command prompt, execute the following command:

ps aux | grep '[h]aproxy' | grep '\s\-d\s'

If the command returns any value, this is a finding.

Check Content Reference

M

Target Key

3455

Comments