STIGQter: STIG Summary: VMW vSphere 6.5 vCenter Server for Windows Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 22 Jan 2021:

The vCenter Server for Windows must enable all tasks to be shown to Administrators in the Web Client.

DISA Rule

SV-216851r612237_rule

Vulnerability Number

V-216851

Group Title

SRG-APP-000516

Rule Version

VCWN-65-000029

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Edit the "webclient.properties" file to set the "show.allusers.tasks" value to "true".

The default location for the "webclient.properties" file are:

Appliance:
/etc/vmware/vsphere-client/

Windows:
C:\ProgramData\VMware\vCenterServer\cfg\vsphere-client\

After editing the file the vSphere Web Client service will need to be restarted.

Check Contents

Verify the "webclient.properties" file contains the line "show.allusers.tasks = true".

The default location for the "webclient.properties" file are:

Appliance:
/etc/vmware/vsphere-client/

Windows:
C:\ProgramData\VMware\vCenterServer\cfg\vsphere-client\

If "show.allusers.tasks" is not set to "true", this is a finding.

Vulnerability Number

V-216851

Documentable

False

Rule Version

VCWN-65-000029

Severity Override Guidance

Verify the "webclient.properties" file contains the line "show.allusers.tasks = true".

The default location for the "webclient.properties" file are:

Appliance:
/etc/vmware/vsphere-client/

Windows:
C:\ProgramData\VMware\vCenterServer\cfg\vsphere-client\

If "show.allusers.tasks" is not set to "true", this is a finding.

Check Content Reference

M

Target Key

4030

Comments