UCF STIG Viewer Logo

Applications must not enable information system functionality providing the capability for automatic execution of code on mobile devices without user direction.


Overview

Finding ID Version Rule ID IA Controls Severity
V-35481 SRG-APP-000022-AS-NA SV-46768r1_rule Medium
Description
Mobile devices include portable storage media (e.g., USB memory sticks, external hard disk drives) and portable computing and communications devices with information storage capability (e.g., notebook/laptop computers, personal digital assistants, cellular telephones, digital cameras, and audio recording devices). This requirement is designed to address vulnerabilities arising when mobile devices such as USB memory sticks or other mobile storage devices are automatically mounted and applications are automatically invoked without user knowledge or acceptance. Application servers do not manage mobile devices and do not allow mobile devices to connect to them as part of their operability requirements. They could host the applications that perform mobile management tasks, but do not have mobile management capabilities.
STIG Date
Application Server Security Requirements Guide 2013-01-08

Details

Check Text ( C-43834r1_chk )
This requirement is NA for the AS SRG.
Fix Text (F-40022r1_fix)
This requirement is NA. No fix is required.