Web server software must be a vendor-supported version.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-2246 | WG190 A20 | SV-75831r1_rule | ECSC-1 | High |
| Description |
|---|
| The web server Software, Apache 2.0, is no longer supported for security updates and is not evaluated or updated for vulnerabilities, leaving it open to potential attack. Organizations must transition to a supported Apache release to ensure continued support. |
| STIG | Date |
|---|---|
| APACHE Server 2.0 for Unix | 2015-08-28 |
Details
| Check Text ( C-62279r1_chk ) |
|---|
| Apache 2.0 reached end of life on July 9, 2014. If Apache 2.0 is installed on a system, this is a finding. |
| Fix Text (F-67251r1_fix) |
|---|
| Upgrade Apache to a supported version. |