Detections
Analytics

7.1 Ensure Fix Level Recommendation Tool Vulnerability Checker Script (FLRTVC) is regularly checked

Information

The Fix Level Recommendation Tool Vulnerability Checker Script (FLRTVC) is a ksh script which uses data from the IBM website to compare the installed filesets and interim fixes on the system against known vulnerabilities and HIPER (High Impact PERvasive) issues.

Unpatched software can expose systems to known vulnerabilities that may be exploited by attackers. It is recommended that operating system updates be performed on enterprise assets through automated patch management on a monthly, or more frequent, basis. Knowledge of outstanding vulnerabilities is an important check within this process

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

If any vulnerabilities are reported above, you should review the details from the URL provided in the output before obtaining the fix from IBM support to install on the system.

See Also

https://workbench.cisecurity.org/benchmarks/22751

Item Details

Category: RISK ASSESSMENT

References: 800-53|RA-5, CSCv7|3.1

Plugin: Unix

Control ID: 5e1faf64c3f4df190b4e885ab7fac4f19dd49b683aff6bcd84f105e6b7a57ca8