Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-233201 | SRG-APP-000401-CTR-000965 | SV-233201r599649_rule | Medium |
Description |
---|
The potential of allowing access to users who are no longer authorized (have revoked certificates) increases unless a local cache of revocation data is configured. |
STIG | Date |
---|---|
Container Platform Security Requirements Guide | 2020-11-24 |
Check Text ( C-36137r599648_chk ) |
---|
Review the container platform configuration. If the container platform is not implemented to use a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network, this is a finding. |
Fix Text (F-36105r599240_fix) |
---|
Configure the container platform to implement a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network. |