z/OS CA Auditor for ACF2 STIG

Version	Date	Finding Count (3)			Downloads
None	2015-01-15 2022-10-06 2022-10-06 2022-10-06 2022-10-06 2022-10-06 2022-10-06 2022-10-06	CAT I (High): 0	CAT II (Med): 3	CAT III (Low): 0	Excel	JSON	XML

STIG Description
None

Classified	Public	Sensitive
I - Mission Critical Classified	I - Mission Critical Public	I - Mission Critical Sensitive	II - Mission Support Classified	II - Mission Support Public	II - Mission Support Sensitive	III - Administrative Classified	III - Administrative Public	III - Administrative Sensitive

Finding ID	Severity	Title	Description
V-21592	Medium	CA Auditor User data sets are not properly protected.	CA Auditor User data sets have the ability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to these data sets could result in violating the...
V-17947	Medium	CA Auditor resources are not properly defined and protected.	CA Auditor can run with sensitive system privileges, and potentially can circumvent system controls. Failure to properly control access to product resources could result in the compromise of the...
V-16932	Medium	CA Auditor installation data sets are not properly protected.	CA Auditor installation data sets have the ability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to these data sets could result in...