IDMS must protect against the use web services that do not require a sign on when actions are performed that may be audited.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

IDMS must protect against the use web services that do not require a sign on when actions are performed that may be audited.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-251598	IDMS-DB-000180	SV-251598r807661_rule		Low

Description
IDMS web services provide a way for web-based applications to access an IDMS database. If not secured, the Web services interface could be used to reveal or change sensitive data.

STIG	Date
CA IDMS Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-55033r807659_chk )
On the IDMS CV system where CA IDMS Web Services executes, enter "WEBC" to check Web Services configuration. If "REQUIRE SIGNON = NO", this is a finding.

Fix Text (F-54987r807660_fix)
On the IDMS CV system where CA IDMS Web Services executes, enter "WEBC REQUIRE SIGNON=YES".