STIGQter: STIG Summary: VMW vRealize Automation 7.x vAMI Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

The vAMI error logs must be reviewed.

DISA Rule

SV-100889r1_rule

Vulnerability Number

V-90239

Group Title

SRG-APP-000266-AS-000168

Rule Version

VRAU-VA-000340

Severity

CAT II

CCI(s)

• CCI-001312 - The information system generates error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

Weight

10

Fix Recommendation

Develop and implement a site procedure to monitor error conditions reported by the vAMI.

Check Contents

Interview the ISSO and/or the SA and review vRA product documentation.

Determine a local procedure exists for monitoring error conditions reported by the vAMI.

If a procedure does not exist or is not being followed, this is a finding.

Vulnerability Number

V-90239

Documentable

False

Rule Version

VRAU-VA-000340

Severity Override Guidance

Interview the ISSO and/or the SA and review vRA product documentation.

Determine a local procedure exists for monitoring error conditions reported by the vAMI.

If a procedure does not exist or is not being followed, this is a finding.

Check Content Reference

M

Target Key

3449

Comments