VMware ESX management software that is no longer supported by the vendor for security updates must not be installed on a system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-68725 | ESX0005 | SV-83303r1_rule | High |
| Description |
|---|
| VMware ESX operating systems, virtual machines, and associated management software that are no longer supported by VMware for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Organizations must transition to a supported ESXi operating system, virtual machines, and associated management software to ensure continued support. |
| STIG | Date |
|---|---|
| VMware ESX 3 Virtual Center | 2016-05-03 |
Details
| Check Text ( C-69217r1_chk ) |
|---|
| VMware support for ESX versions 3 and 4 ended 21 May 2016. If ESX version 3 or 4 management software, such as VirtualCenter or vCenter, is installed on a system, this is a finding. |
| Fix Text (F-74847r2_fix) |
|---|
| Upgrade ESX version 3 and 4 management software to supported versions. |