STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The system must not have a public Instant Messaging (IM) client installed.

DISA Rule

SV-220059r603265_rule

Vulnerability Number

V-220059

Group Title

SRG-OS-000480

Rule Version

GEN006000

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Uninstall the IM client from the system, or configure the client to only connect to DoD-approved IM services.

Check Contents

If an IM client is installed, ask the SA if it has access to any public domain IM servers. If it does have access to public servers, this is a finding.

Vulnerability Number

V-220059

Documentable

False

Rule Version

GEN006000

Severity Override Guidance

If an IM client is installed, ask the SA if it has access to any public domain IM servers. If it does have access to public servers, this is a finding.

Check Content Reference

M

Target Key

4060

Comments