STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The operating system must be a supported release.

DISA Rule

SV-226430r603265_rule

Vulnerability Number

V-226430

Group Title

SRG-OS-000480

Rule Version

GEN000100

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Upgrade to a supported version of the operating system.

Check Contents

# uname -a

Oracle has committed to indefinite "sustaining support" for recent Solaris operating system releases. Verify proof of purchase of support from Oracle.

If the release is not supported, this is a finding.

Severity Override Guidance:
If an extended support agreement provides security patches for the unsupported product is procured from the vendor, this finding may be downgraded to a CAT III.

Vulnerability Number

V-226430

Documentable

False

Rule Version

GEN000100

Severity Override Guidance

# uname -a

Oracle has committed to indefinite "sustaining support" for recent Solaris operating system releases. Verify proof of purchase of support from Oracle.

If the release is not supported, this is a finding.

Severity Override Guidance:
If an extended support agreement provides security patches for the unsupported product is procured from the vendor, this finding may be downgraded to a CAT III.

Check Content Reference

M

Target Key

4060

Comments