STIGQter: STIG Summary: Application Server Security Requirements Guide Version: 3 Release: 1 Benchmark Date: 23 Oct 2020:

The application server must identify prohibited mobile code.

DISA Rule

SV-204760r508029_rule

Vulnerability Number

V-204760

Group Title

SRG-APP-000206

Rule Version

SRG-APP-000206-AS-000145

Severity

CAT II

CCI(s)

• CCI-001166 - The information system identifies organization-defined unacceptable mobile code.

Weight

10

Fix Recommendation

Configure the application server to identify prohibited mobile code.

Check Contents

Review the application server configuration to determine if the application server is configured to identify prohibited mobile code.

If the application server is not configured to identify prohibited mobile code, this is a finding.

Vulnerability Number

V-204760

Documentable

False

Rule Version

SRG-APP-000206-AS-000145

Severity Override Guidance

Review the application server configuration to determine if the application server is configured to identify prohibited mobile code.

If the application server is not configured to identify prohibited mobile code, this is a finding.

Check Content Reference

M

Target Key

2900

Comments