Oracle WebLogic must utilize automated mechanisms to prevent program execution on the information system.

Oracle WebLogic must utilize automated mechanisms to prevent program execution on the information system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-235963	WBLC-03-000129	SV-235963r628667_rule		Low

Description
The application server must provide a capability to halt or otherwise disable the automatic execution of deployed applications until such time that the application is considered part of the established application server baseline. Deployment to the application server should not provide a means for automatic application start-up should the application server itself encounter a restart condition.

STIG	Date
Oracle WebLogic Server 12c Security Technical Implementation Guide	2021-03-18

Details

Check Text ( C-39182r628665_chk )
1. Access AC 2. From 'Domain Structure', select the top-level domain 3. Select 'Configuration' tab -> 'General' tab 4. Ensure 'Production Mode' checkbox is selected If the 'Production Mode' checkbox is not selected, this is a finding.

Fix Text (F-39145r628666_fix)
1. Access AC 2. From 'Domain Structure', select the top-level domain 3. Select 'Configuration' tab -> 'General' tab 4. Check 'Production Mode' checkbox. Click 'Save' 5. Restart all servers