UCF STIG Viewer Logo

The application must employ strong identification and authentication techniques when establishing non-local maintenance and diagnostic sessions


Overview

Finding ID Version Rule ID IA Controls Severity
V-26954 SRG-APP-000185 SV-34237r1_rule Medium
Description
Non-local maintenance and diagnostic activities are those activities conducted by individuals communicating through a network, either an external network (e.g., the Internet) or an internal network. The act of managing systems and applications includes the ability to access sensitive application information, such as, system configuration details, diagnostic information, user information and potentially sensitive application data. When applications provide a remote management capability that is inherent to the application, the application needs to ensure the identification and authentication techniques used to remotely access the system are strong enough to protect the system.
STIG Date
Application Security Requirements Guide 2011-12-28

Details

Check Text ( None )
None
Fix Text (None)
None