STIGQter: STIG Summary: VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

Lighttpd must be configured to use the SSL engine.

DISA Rule

SV-99873r1_rule

Vulnerability Number

V-89223

Group Title

SRG-APP-000015-WSR-000014

Rule Version

VRAU-LI-000020

Severity

CAT II

CCI(s)

CCI-001453 - The information system implements cryptographic mechanisms to protect the integrity of remote access sessions.

Weight

Fix Recommendation

Navigate to and open /opt/vmware/etc/lighttpd/lighttpd.conf

Configure the "lighttpd.conf" file with the following value:

ssl.engine = "enable"

Check Contents

At the command prompt, execute the following command:

grep '^ssl.engine' /opt/vmware/etc/lighttpd/lighttpd.conf

If the value "ssl.engine" is not set to "enable", this is a finding.

Vulnerability Number

V-89223

Documentable

False

Rule Version

VRAU-LI-000020

Severity Override Guidance

At the command prompt, execute the following command:

grep '^ssl.engine' /opt/vmware/etc/lighttpd/lighttpd.conf

If the value "ssl.engine" is not set to "enable", this is a finding.

Check Content Reference

Target Key

3457

Lighttpd must be configured to use the SSL engine.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments