DISA_STIG_VMware_vSphere_7.0_SVC.audit from DISA VMware vSphere 7.0 vCenter Appliance Lookup Service v1r2 STIG

VCLU-70-000001 - Lookup Service must limit the amount of time that each Transport Control Protocol (TCP) connection is kept alive - TCP connection is kept alive.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-256706r888709_rule

STIG-ID|VCLU-70-000001

Vuln-ID|V-256706

VCLU-70-000002 - Lookup Service must limit the number of concurrent connections permitted.

Rule-ID|SV-256707r888712_rule

STIG-ID|VCLU-70-000002

Vuln-ID|V-256707

VCLU-70-000003 - Lookup Service must limit the maximum size of a POST request.

Rule-ID|SV-256708r888715_rule

STIG-ID|VCLU-70-000003

Vuln-ID|V-256708

VCLU-70-000004 - Lookup Service must protect cookies from cross-site scripting (XSS) - XSS.

800-53|SC-8

800-53|SC-23(3)

CCI|CCI-001664

CCI|CCI-002418

Rule-ID|SV-256709r888718_rule

STIG-ID|VCLU-70-000004

Vuln-ID|V-256709

VCLU-70-000005 - Lookup Service must record user access in a format that enables monitoring of remote access.

800-53|AC-17(1)

800-53|AU-3

800-53|AU-8b.

800-53|AU-14(2)

CCI|CCI-000067

CCI|CCI-000130

CCI|CCI-000131

CCI|CCI-000132

CCI|CCI-000133

CCI|CCI-000134

CCI|CCI-001462

CCI|CCI-001487

CCI|CCI-001889

CCI|CCI-001890

Rule-ID|SV-256710r888721_rule

STIG-ID|VCLU-70-000005

Vuln-ID|V-256710

VCLU-70-000006 - Lookup Service must generate log records for system startup and shutdown.

800-53|AU-12a.

800-53|AU-14(1)

CCI|CCI-000169

CCI|CCI-001464

Rule-ID|SV-256711r888724_rule

STIG-ID|VCLU-70-000006

Vuln-ID|V-256711

VCLU-70-000007 - Lookup Service log files must only be accessible by privileged users.

800-53|AU-9

CCI|CCI-000162

CCI|CCI-000163

CCI|CCI-000164

Rule-ID|SV-256712r918958_rule

STIG-ID|VCLU-70-000007

Vuln-ID|V-256712

VCLU-70-000008 - Lookup Service application files must be verified for their integrity.

800-53|CM-5(3)

CCI|CCI-001749

Rule-ID|SV-256713r888730_rule

STIG-ID|VCLU-70-000008

Vuln-ID|V-256713

VCLU-70-000009 - Lookup Service must only run one webapp.

Rule-ID|SV-256714r888733_rule

STIG-ID|VCLU-70-000009

Vuln-ID|V-256714

VCLU-70-000010 - Lookup Service must not be configured with the 'UserDatabaseRealm' enabled.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-256715r888736_rule

STIG-ID|VCLU-70-000010

Vuln-ID|V-256715

VCLU-70-000011 - Lookup Service must be configured to limit access to internal packages.

Rule-ID|SV-256716r888739_rule

STIG-ID|VCLU-70-000011

Vuln-ID|V-256716

VCLU-70-000012 - Lookup Service must have Multipurpose Internet Mail Extensions (MIMEs) that invoke operating system shell programs disabled - MIMEs that invoke operating system shell programs disabled.

Rule-ID|SV-256717r888742_rule

STIG-ID|VCLU-70-000012

Vuln-ID|V-256717

VCLU-70-000013 - Lookup Service must have mappings set for Java servlet pages.

Rule-ID|SV-256718r888745_rule

STIG-ID|VCLU-70-000013

Vuln-ID|V-256718

VCLU-70-000014 - Lookup Service must not have the Web Distributed Authoring (WebDAV) servlet installed - WebDAV servlet installed.

Rule-ID|SV-256719r888748_rule

STIG-ID|VCLU-70-000014

Vuln-ID|V-256719

VCLU-70-000015 - Lookup Service must be configured with memory leak protection.

Rule-ID|SV-256720r888751_rule

STIG-ID|VCLU-70-000015

Vuln-ID|V-256720

VCLU-70-000016 - Lookup Service must not have any symbolic links in the web content directory tree.

Rule-ID|SV-256721r888754_rule

STIG-ID|VCLU-70-000016

Vuln-ID|V-256721

VCLU-70-000017 - Lookup Service directory tree must have permissions in an out-of-the-box state - out-of-the box state.

800-53|CM-5(1)

800-53|SC-2

CCI|CCI-001082

CCI|CCI-001813

Rule-ID|SV-256722r888757_rule

STIG-ID|VCLU-70-000017

Vuln-ID|V-256722

VCLU-70-000018 - Lookup Service must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.

800-53|SC-24

CCI|CCI-001190

Rule-ID|SV-256723r888760_rule

STIG-ID|VCLU-70-000018

Vuln-ID|V-256723

VCLU-70-000019 - Lookup Service must limit the number of allowed connections.

800-53|SC-5(1)

CCI|CCI-001094

Rule-ID|SV-256724r888763_rule

STIG-ID|VCLU-70-000019

Vuln-ID|V-256724

VCLU-70-000020 - Lookup Service must set URIEncoding to UTF-8.

800-53|SI-10

CCI|CCI-001310

Rule-ID|SV-256725r888766_rule

STIG-ID|VCLU-70-000020

Vuln-ID|V-256725

VCLU-70-000021 - Lookup Service must set the welcome-file node to a default web page.

800-53|SI-11a.

CCI|CCI-001312

Rule-ID|SV-256726r888769_rule

STIG-ID|VCLU-70-000021

Vuln-ID|V-256726

VCLU-70-000022 - The Lookup Service must not show directory listings.

Rule-ID|SV-256727r888772_rule

STIG-ID|VCLU-70-000022

Vuln-ID|V-256727

VCLU-70-000023 - Lookup Service must be configured to hide the server version.

Rule-ID|SV-256728r888775_rule

STIG-ID|VCLU-70-000023

Vuln-ID|V-256728

VCLU-70-000024 - Lookup Service must be configured to show error pages with minimal information.

Rule-ID|SV-256729r888778_rule

STIG-ID|VCLU-70-000024

Vuln-ID|V-256729

VCLU-70-000025 - Lookup Service must not enable support for TRACE requests.

Rule-ID|SV-256730r888781_rule

STIG-ID|VCLU-70-000025

Vuln-ID|V-256730

VCLU-70-000026 - Lookup Service must have the debug option turned off.

Rule-ID|SV-256731r888784_rule

STIG-ID|VCLU-70-000026

Vuln-ID|V-256731

VCLU-70-000027 - Lookup Service must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the web server.

800-53|AU-4

CCI|CCI-001849

Rule-ID|SV-256732r888787_rule

STIG-ID|VCLU-70-000027

Vuln-ID|V-256732

VCLU-70-000028 - Lookup Service log files must be offloaded to a central log server in real time.

800-53|AU-4(1)

800-53|AU-5a.

800-53|AU-9(2)

CCI|CCI-000139

CCI|CCI-001348

CCI|CCI-001851

Rule-ID|SV-256733r888790_rule

STIG-ID|VCLU-70-000028

Vuln-ID|V-256733

VCLU-70-000029 - Lookup Service must be configured with the appropriate ports.

800-53|CM-7(1)(b)

CCI|CCI-001762

Rule-ID|SV-256734r888793_rule

STIG-ID|VCLU-70-000029

Vuln-ID|V-256734

VCLU-70-000030 - Lookup Service must disable the shutdown port.

800-53|SC-5

CCI|CCI-002385

Rule-ID|SV-256735r888796_rule

STIG-ID|VCLU-70-000030

Vuln-ID|V-256735

VCLU-70-000031 - Lookup Service must set the secure flag for cookies.

Rule-ID|SV-256736r888799_rule

STIG-ID|VCLU-70-000031

Vuln-ID|V-256736

Detections

Analytics

DISA STIG VMware vSphere 7.0 Lookup Service v1r2

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous