WG050 A22 - The web server password(s) must be entrusted to the SA or Web Manager.


Normally, a service account is established for the web server. This is because a privileged account is not desirable and the server is designed to run for long uninterrupted periods of time. The SA or Web Manager will need password access to the web server to restart the service in the event of an emergency as the web server is not to restart automatically after an unscheduled interruption. If the password is not entrusted to an SA or web manager the ability to ensure the availability of the web server is compromised.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.


Ensure the SA or Web Manager are entrusted with the web service(s) password.

See Also


Item Details

References: CAT|II, Rule-ID|SV-32788r1_rule, STIG-ID|WG050_A22, Vuln-ID|V-2232

Plugin: Unix

Control ID: 0a4bd76e30353dca5844848b1045ee4dd8954229551ecc21d35e34a82936b0d3