Detections
Analytics

CIS Apache HTTP Server 2.2 L2 v3.6.0 Middleware

Audit Details

Name: CIS Apache HTTP Server 2.2 L2 v3.6.0 Middleware

Updated: 6/17/2024

Authority: CIS

Plugin: Unix

Revision: 1.10

Estimated Item Count: 38

File Details

Filename: CIS_Apache_HTTP_Server_2.2_Benchmark_v3.6.0_Level_2_Middleware.audit

Size: 161 kB

MD5: 05325e75abaac98035819832f56afd42
SHA256: 1fe360a72ce9fc88cf882f17dd88b5f5c96dd9a1cbc9b3ce7dd684557bd3aa26

Audit Changelog

 
Revision 1.10

Jun 17, 2024

Miscellaneous
  • Metadata updated.
Revision 1.9

Apr 12, 2023

Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • Variables updated.
Revision 1.8

Mar 7, 2023

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.7

Jan 4, 2023

Miscellaneous
  • Metadata updated.
  • Variables updated.
Revision 1.6

Dec 7, 2022

Miscellaneous
  • Metadata updated.
Revision 1.5

Aug 9, 2022

Functional Update
  • 11.2 Ensure Apache Processes Run in the httpd_t Confined Context
  • 5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteCond %{HTTP_HOST} exists'
  • 5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteCond %{REQUEST_URI} exists'
  • 5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteEngine = on'
  • 5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteRule ^.(.*) - [L,F] exists'
  • 5.12 Ensure IP Address Based Requests Are Disallowed - Rewrite module not loaded
  • 6.6 Ensure ModSecurity Is Installed and Enabled
Miscellaneous
  • Platform check updated.
Revision 1.4

Apr 25, 2022

Miscellaneous
  • Metadata updated.
Revision 1.3

Mar 29, 2022

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.2

Jun 17, 2021

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.1

May 6, 2021

Functional Update
  • 5.11 Ensure Access to Inappropriate File Extensions Is Restricted - 'httpd.conf FileMatch directive Require all denied'
  • 5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteCond %{HTTP_HOST} exists'
  • 5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteCond %{REQUEST_URI} exists'
  • 5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteEngine = on'
  • 5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteRule ^.(.*) - [L,F] exists'
  • 6.2 Ensure a Syslog Facility Is Configured for Error Logging - 'httpd.conf <VirtualHost> Syslog is configured'
  • 7.11 Ensure HTTP Strict Transport Security Is Enabled - 'httpd.conf Strict-Transport-Security 'max-age=480'
  • 7.11 Ensure HTTP Strict Transport Security Is Enabled - 'httpd.conf Strict-Transport-Security configuration'
Miscellaneous
  • Metadata updated.
  • References updated.