STIGQter: STIG Summary: VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

HAProxy must have the latest approved security-relevant software updates installed.

DISA Rule

SV-99865r1_rule

Vulnerability Number

V-89215

Group Title

SRG-APP-000456-WSR-000187

Rule Version

VRAU-HA-000480

Severity

CAT II

CCI(s)

• CCI-002605 - The organization installs security-relevant software updates within an organization-defined time period of the release of the updates.

Weight

10

Fix Recommendation

Ensure HAProxy has the latest approved security-relevant software updates and the updates are installed within the identified time period.

Check Contents

Interview the ISSO.

Determine whether HAProxy has the latest approved security-relevant software updates and updates are installed within the identified time period.

If the latest approved security-relevant software updates are not installed or installed within the identified time period, this is a finding.

Vulnerability Number

V-89215

Documentable

False

Rule Version

VRAU-HA-000480

Severity Override Guidance

Interview the ISSO.

Determine whether HAProxy has the latest approved security-relevant software updates and updates are installed within the identified time period.

If the latest approved security-relevant software updates are not installed or installed within the identified time period, this is a finding.

Check Content Reference

M

Target Key

3455

Comments