WBSP-AS-000240 - The WebSphere Application Server users in a LDAP user registry group must be authorized for that group.

Information

Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges.

Restricting non-privileged users also prevents an attacker, who has gained access to a non-privileged account, from elevating privileges, creating accounts, and performing system checks and maintenance.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

In the LDAP server admin console, assign WebSphere users to the appropriate WebSphere group.

Item Details

Audit Name: DISA IBM WebSphere Traditional 9 Windows STIG v2r1

Category: ACCESS CONTROL

Plugin: Windows

Control ID: 85a76c10616c2c5cbe73be9659be2af1ee3184654f5e6b9c8d00ee366cb0e82f

Detections

Analytics

WBSP-AS-000240 - The WebSphere Application Server users in a LDAP user registry group must be authorized for that group.

Information

Solution

See Also

Item Details