Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-233201 | SRG-APP-000401-CTR-000965 | SV-233201r981893_rule | Medium |
Description |
---|
The potential of allowing access to users who are no longer authorized (have revoked certificates) increases unless a local cache of revocation data is configured. |
STIG | Date |
---|---|
Container Platform Security Requirements Guide | 2024-05-28 |
Check Text ( C-36137r601805_chk ) |
---|
Review the container platform configuration. If the container platform is not implemented to use a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network, this is a finding. |
Fix Text (F-36105r601091_fix) |
---|
Configure the container platform to implement a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network. |