STIGQter: STIG Summary: IBM WebSphere Traditional V9.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 23 Aug 2018:

The WebSphere Application Server administrative security must be enabled.

DISA Rule

SV-95913r1_rule

Vulnerability Number

V-81199

Group Title

SRG-APP-000315-AS-000094

Rule Version

WBSP-AS-000130

Severity

CAT I

CCI(s)

• CCI-002314 - The information system controls remote access methods.

Weight

10

Fix Recommendation

From the administrative console, click Security >> Global Security.

Click "Enable administrative security".

Click "Save".

Restart the DMGR and all the JVMs.

Check Contents

From the administrative console, click Security >> Global Security.

If "Enable administrative security" is not selected, this is a finding.

Vulnerability Number

V-81199

Documentable

False

Rule Version

WBSP-AS-000130

Severity Override Guidance

From the administrative console, click Security >> Global Security.

If "Enable administrative security" is not selected, this is a finding.

Check Content Reference

M

Target Key

3399

Comments