Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-80971 | M360-01-022200 | SV-95683r1_rule | High |
Description |
---|
The IBM MaaS360 V2 server is no longer supported by IBM and therefore, may contain security vulnerabilities. The IBM MaaS360 V2 server is not authorized within the DoD. |
STIG | Date |
---|---|
IBM MaaS360 v2.3.x MDM Security Technical Implementation Guide | 2018-09-13 |
Check Text ( C-81203r1_chk ) |
---|
Interview ISSO and IBM MaaS360 MDM system administrator. Verify the site is not using the IBM MaaS360 V2 MDM or subscribing to a MaaS360 V2 MDM SaaS. If the site is using the IBM MaaS360 V2 MDM or subscribing to a MaaS360 V2 MDM SaaS, this is a finding. |
Fix Text (F-88279r1_fix) |
---|
Remove all versions of IBM MaaS360 V2 MDM or stop subscribing to a MaaS360 V2 MDM SaaS. |