The MDM server must check the validity of information inputs.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36064	SRG-APP-251-MDM-060-SRV	SV-47455r1_rule		Medium

Description
Invalid user input occurs when a user inserts data or characters into an applications data entry fields and the application is unprepared to process that data. This results in unanticipated application behavior potentially leading to an application or information system compromise. Invalid user input is one of the primary methods employed when attempting to compromise an application.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44303r1_chk )
Review the MDM server configuration to determine the system can check the validity of information inputs. If this function cannot be performed, this is a finding.

Fix Text (F-40594r3_fix)
Configure the MDM server to check the validity of information inputs.