STIGQter STIGQter: STIG Summary: Apache Server 2.4 UNIX Server Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The Apache web server software must be a vendor-supported version.

DISA Rule

SV-214273r612240_rule

Vulnerability Number

V-214273

Group Title

SRG-APP-000516-WSR-000174

Rule Version

AS24-U1-000960

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Install the current version of the web server software and maintain appropriate service packs and patches.

Check Contents

Determine the version of the Apache software that is running on the system by entering the following command:

httpd -v

If the version of Apache is not at the following version or higher, this is a finding:

Apache 2.4 (February 2012)

NOTE: In some situations, the Apache software that is being used is supported by another vendor, such as Oracle in the case of the Oracle Application Server or IBM's HTTP Server. The versions of the software in these cases may not match the version number noted above. If the site can provide vendor documentation showing the version of the web server is supported, this would not be a finding.

Vulnerability Number

V-214273

Documentable

False

Rule Version

AS24-U1-000960

Severity Override Guidance

Determine the version of the Apache software that is running on the system by entering the following command:

httpd -v

If the version of Apache is not at the following version or higher, this is a finding:

Apache 2.4 (February 2012)

NOTE: In some situations, the Apache software that is being used is supported by another vendor, such as Oracle in the case of the Oracle Application Server or IBM's HTTP Server. The versions of the software in these cases may not match the version number noted above. If the site can provide vendor documentation showing the version of the web server is supported, this would not be a finding.

Check Content Reference

M

Target Key

3996

Comments