The UEM server must be configured to write to the server event log when invalid inputs are received.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-234596	SRG-APP-000447-UEM-000321	SV-234596r617355_rule		Medium

Description
A common vulnerability of applications is unpredictable behavior when invalid inputs are received. This requirement guards against adverse or unintended system behavior caused by invalid inputs, where information system responses to the invalid input may be disruptive or cause the system to fail into an unsafe state. The behavior will be derived from the organizational and system requirements and includes, but is not limited to, notification of the appropriate personnel, creating an audit record, and rejecting invalid input. Satisfies:FPT_TST_EXT.1.2

Description

A common vulnerability of applications is unpredictable behavior when invalid inputs are received. This requirement guards against adverse or unintended system behavior caused by invalid inputs, where information system responses to the invalid input may be disruptive or cause the system to fail into an unsafe state. The behavior will be derived from the organizational and system requirements and includes, but is not limited to, notification of the appropriate personnel, creating an audit record, and rejecting invalid input. Satisfies:FPT_TST_EXT.1.2

STIG	Date
Unified Endpoint Management Server Security Requirements Guide	2020-12-14

Details

Check Text ( C-37781r615422_chk )
Verify the UEM server writes to the server event log when invalid inputs are received. If the UEM server does not write to the server event log when invalid inputs are received, this is a finding.

Fix Text (F-37746r615423_fix)
Configure the UEM server to write to the server event log when invalid inputs are received.