Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Application servers must prevent encrypted data from bypassing content-checking mechanisms.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-35552 | SRG-APP-000056-AS-NA | SV-46839r1_rule | Medium |
| Description |
|---|
| Information flow control regulates where information is allowed to travel within an information system and between information systems (as opposed to who is allowed to access the information), without explicit regard to subsequent access to that information. The AS itself does not transmit encrypted data. The AS provides the capability for hosted applications to transmit encrypted data. This is a hosted application requirement. |
| STIG | Date |
|---|---|
| Application Server Security Requirements Guide | 2013-01-08 |
Details
| Check Text ( C-43891r1_chk ) |
|---|
| This requirement is NA for the AS SRG. |
| Fix Text (F-40092r1_fix) |
|---|
| The requirement is NA. No fix is required. |