STIGQter: STIG Summary: Application Server Security Requirements Guide Version: 3 Release: 1 Benchmark Date: 23 Oct 2020:

The application server must accept Personal Identity Verification (PIV) credentials to access the management interface.

DISA Rule

SV-204800r508029_rule

Vulnerability Number

V-204800

Group Title

SRG-APP-000391

Rule Version

SRG-APP-000391-AS-000239

Severity

CAT II

CCI(s)

• CCI-001953 - The information system accepts Personal Identity Verification (PIV) credentials.

Weight

10

Fix Recommendation

Configure the application server to accept PIV credentials to access the management interface.

Check Contents

Review application server documentation and configuration to ensure the application server accepts PIV credentials to the management interface.

If PIV credentials are not accepted, this is a finding.

Vulnerability Number

V-204800

Documentable

False

Rule Version

SRG-APP-000391-AS-000239

Severity Override Guidance

Review application server documentation and configuration to ensure the application server accepts PIV credentials to the management interface.

If PIV credentials are not accepted, this is a finding.

Check Content Reference

M

Target Key

2900

Comments