Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Applications providing intrusion and prevention capabilities must prevent non-privileged users from circumventing those capabilities.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-35114 | SRG-APP-000285-AS-NA | SV-46401r1_rule | Medium |
| Description |
|---|
| Any application providing intrusion detection and prevention capabilities must be architected and implemented so as to prevent non-privileged users from circumventing such protections. This can be accomplished through the use of user roles, proper systems permissions, auditing, logging, etc. This requirement is NA. The AS is not an incident response tool. |
| STIG | Date |
|---|---|
| Application Server Security Requirements Guide | 2013-01-08 |
Details
| Check Text ( C-43504r1_chk ) |
|---|
| This requirement is NA for the AS SRG. |
| Fix Text (F-39667r1_fix) |
|---|
| The requirement is NA. No fix is required. |