z/OS CL/SuperSession for ACF2 STIG

z/OS CL/SuperSession for ACF2 STIG

Overview

Version	Date	Finding Count (7)			Downloads
None	2015-03-27 2017-06-26 2017-09-15 2018-04-04 2018-04-04 2018-04-04 2018-04-04 2018-04-04 2018-04-04 2018-04-04 2018-04-04 2018-04-04 2018-04-04 2021-06-25 2021-06-25 2021-06-25 2021-06-25 2022-10-06 2022-10-06 2022-10-06 2022-10-06 2022-10-06	CAT I (High): 0	CAT II (Med): 7	CAT III (Low): 0	Excel	JSON	XML

STIG Description
None

Available Profiles

Classified	Public	Sensitive
I - Mission Critical Classified	I - Mission Critical Public	I - Mission Critical Sensitive	II - Mission Support Classified	II - Mission Support Public	II - Mission Support Sensitive	III - Administrative Classified	III - Administrative Public	III - Administrative Sensitive

Findings (MAC III - Administrative Sensitive)

Finding ID	Severity	Title	Description
V-22689	Medium	CL/SuperSession is not properly configured to generate SMF records for audit trail and accounting reports.	Product configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be...
V-17067	Medium	CL/SuperSession STC data sets will be properly protected.	CL/SuperSession STC data sets provide the capability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to their data sets could result in...
V-22691	Medium	CL/SuperSession APPCLASS member is not configured in accordance with the proper security requirements.	CL/SuperSession configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls...
V-22690	Medium	CL/SuperSession KLVINNAM member must be configured in accordance to security requirements.	CL/SuperSession configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls...
V-17452	Medium	CL/SuperSession Started Task name is not properly identified / defined to the system ACP.	CL/SuperSession requires a started task that will be restricted to certain resources, datasets and other system functions. By defining the started task as a userid to the system ACP, It allows the...
V-18014	Medium	CL/SuperSession profile options are set improperly.	Product configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be...
V-16932	Medium	CL/SuperSession Install data sets are not properly protected.	CL/SuperSession Install data sets provide the capability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to their data sets could result in...