WG050 W22 - The web server service password(s) must be entrusted to the SA or Web Manager.

Information

Normally, a service account is established for the web server. This is because a privileged account is not desirable and the server is designed to run for long uninterrupted periods of time. The SA or Web Manager will need password access to the web server to restart the service in the event of an emergency as the web server is not to restart automatically after an unscheduled interruption. If the password is not entrusted to an SA or web manager the ability to ensure the availability of the web server is compromised.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Ensure the SA or Web Manager is entrusted with the web service(s) password.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Apache_2-2_WIN_V1R13_STIG.zip

Item Details

References: CAT|II, Rule-ID|SV-33048r1_rule, STIG-ID|WG050_W22, Vuln-ID|V-2232

Plugin: Windows

Control ID: 109968bba21b6cd8ea3461ec0f79d27e8f16cc3949d9e86fcd4666a98d5ee509