UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The SLES for vRealize must have USB disabled unless needed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239511 VROM-SL-000450 SV-239511r661984_rule Medium
Description
USB is a common computer peripheral interface. USB devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.
STIG Date
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide 2021-07-01

Details

Check Text ( C-42744r661982_chk )
If SLES for vRealize needs USB, this vulnerability is not applicable.

Check if the directory "/proc/bus/usb exists".

If the directory "/proc/bus/usb exists", this is a finding.
Fix Text (F-42703r661983_fix)
Edit the grub bootloader file, "/boot/grub/menu.lst" file, by appending the "nousb" parameter to the kernel boot line.