Only authorized versions of the IBM MaaS360 server must be used.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-80971 | M360-01-022200 | SV-95683r1_rule | High |
| Description |
|---|
| The IBM MaaS360 V2 server is no longer supported by IBM and therefore, may contain security vulnerabilities. The IBM MaaS360 V2 server is not authorized within the DoD. |
| STIG | Date |
|---|---|
| IBM MaaS360 v2.3.x MDM Security Technical Implementation Guide | 2018-09-13 |
Details
| Check Text ( C-81203r1_chk ) |
|---|
| Interview ISSO and IBM MaaS360 MDM system administrator. Verify the site is not using the IBM MaaS360 V2 MDM or subscribing to a MaaS360 V2 MDM SaaS. If the site is using the IBM MaaS360 V2 MDM or subscribing to a MaaS360 V2 MDM SaaS, this is a finding. |
| Fix Text (F-88279r1_fix) |
|---|
| Remove all versions of IBM MaaS360 V2 MDM or stop subscribing to a MaaS360 V2 MDM SaaS. |