Windows Server 2022 FTP servers must be configured to prevent access to the system drive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254280	WN22-00-000430	SV-254280r848656_rule		Medium

Description
The FTP service allows remote users to access shared files and directories that could provide access to system resources and compromise the system, especially if the user can gain access to the root directory of the boot drive.

STIG	Date
Microsoft Windows Server 2022 Security Technical Implementation Guide	2024-02-27

Details

Check Text ( C-57765r848654_chk )
If FTP is not installed on the system, this is NA. Open "Internet Information Services (IIS) Manager". Select "Sites" under the server name. For any sites with a Binding that lists FTP, right-click the site and select "Explore". If the site is not defined to a specific folder for shared FTP resources, this is a finding. If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding.

Check Text ( C-57765r848654_chk )

If FTP is not installed on the system, this is NA.

Open "Internet Information Services (IIS) Manager".

Select "Sites" under the server name.

For any sites with a Binding that lists FTP, right-click the site and select "Explore".

If the site is not defined to a specific folder for shared FTP resources, this is a finding.

If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding.

Fix Text (F-57716r848655_fix)
Configure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system.