Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-36064 | SRG-APP-251-MDM-060-SRV | SV-47455r1_rule | Medium |
Description |
---|
Invalid user input occurs when a user inserts data or characters into an applications data entry fields and the application is unprepared to process that data. This results in unanticipated application behavior potentially leading to an application or information system compromise. Invalid user input is one of the primary methods employed when attempting to compromise an application. |
STIG | Date |
---|---|
Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Check Text ( C-44303r1_chk ) |
---|
Review the MDM server configuration to determine the system can check the validity of information inputs. If this function cannot be performed, this is a finding. |
Fix Text (F-40594r3_fix) |
---|
Configure the MDM server to check the validity of information inputs. |