Detections
Analytics

8.9 (L2) VMware Tools must deactivate Appinfo information gathering unless required

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Deactivating the Appinfo module, unless necessary, through VMware Tools is a prudent measure to minimize the attack surface. This module is designed for application discovery, but if not in use, it should be disabled. The parameter governing this behavior is appinfo disabled with a recommended setting of true.

By deactivating the Appinfo module when not in use, potential vectors for unauthorized access or data leakage can be reduced.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Impact:

Disabling Appinfo may affect products and services within the VMware ecosystem that depend on this functionality, necessitating alternative configurations or solutions to retain those capabilities.

See Also

https://workbench.cisecurity.org/benchmarks/19200

Item Details

References: CSCv7|9.1

Plugin: VMware

Control ID: afeaf406f49b3d2d9bc28a20ed86a46311ee1805684a10ba758a3ecbde367e98