Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-27102 | SRG-APP-000285 | SV-34397r1_rule | Medium |
Description |
---|
Any application providing intrusion detection and prevention capabilities must be architected and implemented so as to prevent non-privileged users from circumventing such protections. This can be accomplished through the use of user roles, use of proper systems permissions, auditing, logging, etc. |
STIG | Date |
---|---|
Application Security Requirements Guide | 2011-12-28 |
Check Text ( None ) |
---|
None |
Fix Text (None) |
---|
None |