STIGQter: STIG Summary: VMware vSphere 6.7 vCenter Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 09 Mar 2021:

The vCenter Server must enable all tasks to be shown to Administrators in the Web Client.

DISA Rule

SV-243130r719633_rule

Vulnerability Number

V-243130

Group Title

SRG-APP-000516

Rule Version

VCTR-67-000075

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Edit the "webclient.properties" file to set the "show.allusers.tasks" value to "true".

On the vCenter Server locate the "webclient.properties" file in
C:\ProgramData\VMware\vCenterServer\cfg\vsphere-client

After editing the file the vSphere Client service will need to be restarted.

Check Contents

Note: For vCenter Server Appliance, this is not applicable.

Verify the "webclient.properties" file contains the line "show.allusers.tasks = true".

On the vCenter Server locate the "webclient.properties" file in
C:\ProgramData\VMware\vCenterServer\cfg\vsphere-client

If "show.allusers.tasks" is not set to "true", this is a finding.

Vulnerability Number

V-243130

Documentable

False

Rule Version

VCTR-67-000075

Severity Override Guidance

Note: For vCenter Server Appliance, this is not applicable.

Verify the "webclient.properties" file contains the line "show.allusers.tasks = true".

On the vCenter Server locate the "webclient.properties" file in
C:\ProgramData\VMware\vCenterServer\cfg\vsphere-client

If "show.allusers.tasks" is not set to "true", this is a finding.

Check Content Reference

M

Target Key

5399

Comments