STIGQter: STIG Summary: Application Security and Development Security Technical Implementation Guide Version: 5 Release: 1 Benchmark Date: 23 Oct 2020:

The application must display the time and date of the users last successful logon.

DISA Rule

SV-222437r508029_rule

Vulnerability Number

V-222437

Group Title

SRG-APP-000075

Rule Version

APSC-DV-000580

Severity

CAT III

CCI(s)

CCI-000052 - The information system notifies the user, upon successful logon (access) to the system, of the date and time of the last logon (access).

Weight

Fix Recommendation

Design and configure the application to display the date and time when the user was last successfully granted access to the application.

Check Contents

Review the application documentation and interview the application administrator.

If the application does not provide a user interface, this requirement is not applicable.

Logon to the application as a test user and verify successful authentication by creating test data, navigating the application functionality or otherwise utilizing the application.

Note the date and time access was granted.

Log out of the application.

Re-authenticate to the application as the same user.

Validate the last logon date and time is displayed in the user interface.

If the date and time the user account was last granted access to the application is not displayed in the user interface, this is a finding.

The application must display the time and date of the users last successful logon.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments