Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-240253 | VRAU-LI-000310 | SV-240253r879640_rule | Medium |
Description |
---|
Without maintenance of a baseline of current Lighttpd software, monitoring for changes cannot be complete and unauthorized changes to the software can go undetected. Changes to Lighttpd could be the result of intentional or unintentional actions. |
STIG | Date |
---|---|
VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide | 2023-09-12 |
Check Text ( C-43486r667934_chk ) |
---|
Obtain supporting documentation from the ISSO. Determine if a software baseline is being maintained. If a baseline is not being maintained, this is a finding. |
Fix Text (F-43445r667935_fix) |
---|
Update the software baseline. |