The mobile app must prevent organization-defined software from executing at higher privilege levels than users executing the software.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-APP-000342-MAPP-000100	SRG-APP-000342-MAPP-000100	SRG-APP-000342-MAPP-000100_rule		Medium

Description
In certain situations, software applications/programs need to execute with elevated privileges to perform required functions. However, if the privileges required for execution are at a higher level than the privileges assigned to organizational users invoking such applications/programs, those users are indirectly provided with greater privileges than assigned by organizations.

STIG	Date
Mobile Application Security Requirements Guide	2014-07-22

Details

Check Text ( C-SRG-APP-000342-MAPP-000100_chk )
Review the mobile app configuration or code to determine if the app prevents organization-defined software from executing at higher privilege levels than users executing the software. If the app does not do this, it is a finding.

Fix Text (F-SRG-APP-000342-MAPP-000100_fix)
Configure or code the mobile app to ensure the app prevents organization-defined software from executing at higher privilege levels than users executing the software.