VCWN-06-000029 - The system must enable all tasks to be shown to Administrators in the Web Client.

Information

By default not all tasks are shown in the web client to administrators and only that user's tasks will be shown. Enabling all tasks to be shown will allow the administrator to potentially see any malicious activity they may miss with the view disabled.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Edit the webclient.properties file to set the show.allusers.tasks setting to true.

The default locations for the webclient.properties file are:

Windows - C:\ProgramData\VMware\vCenterServer\cfg\vsphere-client\

Appliance - /etc/vmware/vsphere-client/

After editing the file the vSphere Web Client service will need to be restarted.

See Also

http://iasecontent.disa.mil/stigs/zip/U_VMware_vSphere_6-0_vCenter_Server_for_Windows_V1R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-63995, Rule-ID|SV-78485r1_rule, STIG-ID|VCWN-06-000029, Vuln-ID|V-63995

Plugin: VMware

Control ID: 92ca5c1de3a0c09143493f2a1d28122d27ff97fc993143152c097a8d65e93de9