Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The application server must implement transaction recovery for transaction-based processes.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-35241 | SRG-APP-000144-AS-000098 | SV-46528r1_rule | Low |
| Description |
|---|
| Transaction rollback and transaction journaling are examples of mechanisms supporting transaction recovery. Use of transactions prevents databases from being left in inconsistent states due to incomplete updates and ensures message delivery, which is a data integrity issue. The application server must provide a transaction recovery capability for hosted applications. |
| STIG | Date |
|---|---|
| Application Server Security Requirements Guide | 2013-01-08 |
Details
| Check Text ( C-43608r1_chk ) |
|---|
| Review the AS documentation and configuration to determine if the AS provides transaction recovery capabilities. If the AS is not configured to meet this requirement, this is a finding. |
| Fix Text (F-39786r1_fix) |
|---|
| Configure the AS to recover transactions. |