Detections
Analytics

VCENTER-000029 - vSphere Client plugins must be verified

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The vCenter Server includes a vSphere Client extensibility framework, which provides the ability to extend the vSphere Client with menu selections or toolbar icons that provide access to vCenter Server add-on components or external, Web-based functionality. vSphere Client plugins or extensions run at the same privilege level as the user. Malicious extensions might masquerade as useful add-ons while compromising the system by stealing credentials or incorrectly configuring the system.

Solution

Disable/remove all listed plug-ins that cannot be verified as distributed from trusted sources: From the vSphere client, connect to the vCenter server. On the menu bar, go to 'Plug-ins >> Manage Plug-ins'. Under Installed Plug-ins, right-click the plug-in of choice and select Disable

See Also

http://iase.disa.mil/stigs/os/virtualization/Pages/index.aspx

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CAT|II, CCI|CCI-000366, Group-ID|V-39564, Rule-ID|SV-51422r1_rule, STIG-ID|VCENTER-000029, Vuln-ID|V-39564

Plugin: VMware

Control ID: 0751137a29939089d66ff85f197fd6859b4b5841d8f459e53e9ef3aa8edb17cf