STIGQter: STIG Summary: IBM z/OS TSS Security Technical Implementation Guide Version: 8 Release: 2 Benchmark Date: 23 Apr 2021:

CA-TSS VTHRESH Control Option values specified must be set to (10,NOT,CAN).

DISA Rule

SV-223972r561402_rule

Vulnerability Number

V-223972

Group Title

SRG-OS-000279-GPOS-00109

Rule Version

TSS0-ES-000990

Severity

CAT II

CCI(s)

• CCI-002361 - The information system automatically terminates a user session after organization-defined conditions or trigger events requiring session disconnect.

Weight

10

Fix Recommendation

Evaluate the impact associated with implementation of the control option. Develop a plan of action to implement the control option setting to "VTHRESH(10,NOT,CAN)", and proceed with the change.

Check Contents

From the ISPF Control Shell enter:
TSS MODIFY STATUS

If the VTHRESH Control Option values are not set to "VTHRRESH(10,NOT,CAN)", this is a finding.

Vulnerability Number

V-223972

Documentable

False

Rule Version

TSS0-ES-000990

Severity Override Guidance

From the ISPF Control Shell enter:
TSS MODIFY STATUS

If the VTHRESH Control Option values are not set to "VTHRRESH(10,NOT,CAN)", this is a finding.

Check Content Reference

M

Target Key

4102

Comments