Detections
Analytics

WBSP-AS-000230 - The WebSphere Application Server LDAP groups must be authorized for the WebSphere role.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Strong access controls are critical to securing the application server. Access control policies (e.g., identity-based policies, role-based policies, attribute-based policies) and access enforcement mechanisms (e.g., access control lists, access control matrices, cryptography) must be employed by the application server to control access between users (or processes acting on behalf of users) and objects (e.g., applications, files, records, processes, application domains) in the application server.

Without stringent logical access and authorization controls, an adversary may have the ability, with very little effort, to compromise the application server and associated supporting infrastructure.

Satisfies: SRG-APP-000033-AS-000024, SRG-APP-000267-AS-000170

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Navigate to User and Groups >> Administrative group roles.

If any group is assigned roles that the group should not have, click on the group.

Assign only the role(s) the group should have.

Click 'OK'.

Click 'Save'.

Restart the DMGR and all the JVMs.

See Also

http://iasecontent.disa.mil/stigs/zip/U_IBM_WebSphere_Traditional_V9-x_V1R1_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000213, CCI|CCI-001314, Rule-ID|SV-95943r1_rule, STIG-ID|WBSP-AS-000230, Vuln-ID|V-81229

Plugin: Unix

Control ID: ad829f1fd5a1a6974fced43b9bec7eda039d5977d34df7ae7c37a19ee46988eb