VMware ESX virtual machines that are no longer supported by the vendor for security updates must not be installed on a system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-68727	ESX1100	SV-83305r1_rule	DCSQ-1	High

Description
VMware ESX operating systems, virtual machines, and associated management software that are no longer supported by VMware for security updates are not evaluated or updated for vulnerabilities leaving them open to potential attack. Organizations must transition to a supported ESXi operating system, virtual machines, and associated management software to ensure continued support.

STIG	Date
VMware ESX 3 Virtual Machine	2016-05-03

Details

Check Text ( C-69219r2_chk )
VMware support for ESX versions 3 and 4 ended 21 May 2016. If ESX version 3 or 4 virtual machines are installed on a system, this is a finding.

Fix Text (F-74849r1_fix)
Upgrade ESX version 3 and 4 virtual machines to supported versions.