VCTR-67-000029 - The vCenter Server must enable all tasks to be shown to Administrators in the Web Client.

Information

By default, not all tasks are shown in the Web Client to Administrators, and only that user's tasks will be shown. Enabling all tasks to be shown will allow the Administrator to potentially see any malicious activity they may miss with the view disabled.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Navigate to and open /etc/vmware/vsphere-client/webclient.properties. Remove any existing 'show.allusers.tasks' line and add the following:

show.allusers.tasks = true

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_Y23M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-243093r879887_rule, STIG-ID|VCTR-67-000029, Vuln-ID|V-243093

Plugin: VMware

Control ID: 91899c1cdc602688bfe682066b99718c031942fa63a9574eeed023806cc768f6