Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-234605 | SRG-APP-000456-UEM-000330 | SV-234605r879827_rule | High |
Description |
---|
The UEM vendor maintains specific product versions for a specific period of time. MDM/EMM server versions no longer supported by the vendor will not receive security updates for new vulnerabilities, which leaves them subject to exploitation. Satisfies:FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.2 Reference:PP-MDM-414005 |
STIG | Date |
---|---|
Unified Endpoint Management Server Security Requirements Guide | 2023-02-13 |
Check Text ( C-37790r615449_chk ) |
---|
Verify the UEM server is maintained at a supported version. If the UEM server is not maintained at a supported version, this is a finding. |
Fix Text (F-37755r615450_fix) |
---|
Configure the UEM server to be maintained at a supported version. |