Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
SRG-APP-000342-MAPP-000100 | SRG-APP-000342-MAPP-000100 | SRG-APP-000342-MAPP-000100_rule | Medium |
Description |
---|
In certain situations, software applications/programs need to execute with elevated privileges to perform required functions. However, if the privileges required for execution are at a higher level than the privileges assigned to organizational users invoking such applications/programs, those users are indirectly provided with greater privileges than assigned by organizations. |
STIG | Date |
---|---|
Mobile Application Security Requirements Guide | 2014-07-22 |
Check Text ( C-SRG-APP-000342-MAPP-000100_chk ) |
---|
Review the mobile app configuration or code to determine if the app prevents organization-defined software from executing at higher privilege levels than users executing the software. If the app does not do this, it is a finding. |
Fix Text (F-SRG-APP-000342-MAPP-000100_fix) |
---|
Configure or code the mobile app to ensure the app prevents organization-defined software from executing at higher privilege levels than users executing the software. |