Detections
Analytics
VCENTER-000016 - Log files must be cleaned up after failed installations of the vCenter Server
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
If the vCenter installation fails, a log file (with a name of the form 'hs_err_pidXXXX') is created that contains the database password in plain text. An attacker who breaks into the vCenter Server could potentially steal this password and access the vCenter Database.Solution
Develop a site policy for handling failed installation cleanup of the Windows host prior to deployment. Using the Windows host search function, determine the existence of any log files of format 'hs_err_pid' and remove them.See Also
http://iase.disa.mil/stigs/os/virtualization/Pages/index.aspx
Item Details
Audit Name: DISA STIG VMWare ESXi vCenter 5 STIG v1r7
References: CAT|II, CCI|CCI-000366, Group-ID|V-39554, Rule-ID|SV-51412r1_rule, STIG-ID|VCENTER-000016, Vuln-ID|V-39554
Plugin: VMware
Control ID: 0f19c400bc58a011daa0328d6858a21e00d83617331361dc6580ac43662b1a4a