Item Search

NameAudit NamePluginCategory
APPL-14-002021 The macOS system must disable sending diagnostic and usage data to Apple.DISA Apple macOS 14 (Sonoma) STIG v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-14-004001 The macOS system must configure Apple System Log files to be owned by root and group to wheel.DISA Apple macOS 14 (Sonoma) STIG v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-14-004002 The macOS system must configure Apple System Log files to mode 640 or less permissive.DISA Apple macOS 14 (Sonoma) STIG v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-14-004030 The macOS system must configure system log files to be owned by root and group to wheel.DISA Apple macOS 14 (Sonoma) STIG v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-14-004040 The macOS system must configure system log files to mode 640 or less permissive.DISA Apple macOS 14 (Sonoma) STIG v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-15-002021 - The macOS system must disable sending diagnostic and usage data to Apple.DISA Apple macOS 15 (Sequoia) STIG v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-15-004001 - The macOS system must configure Apple System Log (ASL) files owned by root and group to wheel.DISA Apple macOS 15 (Sequoia) STIG v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-15-004002 - The macOS system must configure Apple System Log (ASL) files to mode 640 or less permissive.DISA Apple macOS 15 (Sequoia) STIG v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-15-004030 - The macOS system must configure system log files owned by root and group to wheel.DISA Apple macOS 15 (Sequoia) STIG v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-15-004040 - The macOS system must configure system log files to mode 640 or less permissive.DISA Apple macOS 15 (Sequoia) STIG v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

AS24-U1-000630 - Debugging and trace information used to diagnose the Apache web server must be disabled.DISA STIG Apache Server 2.4 Unix Server v3r1Unix

SYSTEM AND INFORMATION INTEGRITY

DTBC-0068 - Chrome development tools must be disabled.DISA STIG Google Chrome v2r9Windows

SYSTEM AND INFORMATION INTEGRITY

DTBI1135-IE11 - Internet Explorer Development Tools Must Be Disabled.DISA STIG IE 11 v2r5Windows

SYSTEM AND INFORMATION INTEGRITY

FFOX-00-000015 - Firefox development tools must be disabled.DISA STIG Mozilla Firefox Linux v6r5Unix

SYSTEM AND INFORMATION INTEGRITY

FFOX-00-000015 - Firefox development tools must be disabled.DISA STIG Mozilla Firefox MacOS v6r5Unix

SYSTEM AND INFORMATION INTEGRITY

MD3X-00-000520 - MongoDB must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA STIG MongoDB Enterprise Advanced 3.x v2r3 OSUnix

SYSTEM AND INFORMATION INTEGRITY

PGS9-00-000600 - PostgreSQL must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA STIG PostgreSQL 9.x on RHEL DB v2r5PostgreSQLDB

SYSTEM AND INFORMATION INTEGRITY

SHPT-00-000810 - SharePoint must identify potentially security-relevant error conditions.DISA STIG SharePoint 2010 v1r9Windows

SYSTEM AND INFORMATION INTEGRITY

SLES-15-010340 - The SUSE operating system must generate error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA SLES 15 STIG v2r2Unix

SYSTEM AND INFORMATION INTEGRITY

SYMP-AG-000590 - Symantec ProxySG must tailor the Exceptions messages to generate error messages that provide the information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA Symantec ProxySG Benchmark ALG v1r3BlueCoat

SYSTEM AND INFORMATION INTEGRITY

UBTU-20-010416 - The Ubuntu operating system must generate error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA STIG Ubuntu 20.04 LTS v2r1Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-24-700010 - Ubuntu 24.04 LTS must generate error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA Canonical Ubuntu 24.04 LTS STIG v1r1Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-24-700030 - Ubuntu 24.04 LTS must be configured so that the "journalctl" command is not accessible by unauthorized users.DISA Canonical Ubuntu 24.04 LTS STIG v1r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCEM-70-000024 - ESX Agent Manager must be configured to show error pages with minimal information.DISA STIG VMware vSphere 7.0 EAM Tomcat v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCEM-70-000026 - ESX Agent Manager must hide the server version.DISA STIG VMware vSphere 7.0 EAM Tomcat v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCLD-70-000021 - VAMI must not be configured to use 'mod_status' - WebDAV servlet installed.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCLD-70-000022 - VAMI must have debug logging disabled.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCLU-70-000021 - Lookup Service must set the welcome-file node to a default web page.DISA STIG VMware vSphere 7.0 Lookup Service v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCLU-70-000024 - Lookup Service must be configured to show error pages with minimal information.DISA STIG VMware vSphere 7.0 Lookup Service v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCLU-70-000025 - Lookup Service must not enable support for TRACE requests.DISA STIG VMware vSphere 7.0 Lookup Service v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCLU-80-000067 The vCenter Lookup service 'ErrorReportValve showServerInfo' must be set to 'false'.DISA VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v2r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCPF-70-000022 - Performance Charts must set the welcome-file node to a default web page.DISA STIG VMware vSphere 7.0 Perfcharts Tomcat v1r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCPF-70-000023 - Performance Charts must not show directory listings.DISA STIG VMware vSphere 7.0 Perfcharts Tomcat v1r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCPF-70-000024 - Performance Charts must be configured to show error pages with minimal information.DISA STIG VMware vSphere 7.0 Perfcharts Tomcat v1r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCPF-70-000025 - Performance Charts must be configured to not show error reports.DISA STIG VMware vSphere 7.0 Perfcharts Tomcat v1r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCPF-70-000027 - Performance Charts must not enable support for TRACE requestsDISA STIG VMware vSphere 7.0 Perfcharts Tomcat v1r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCPF-70-000028 - Performance Charts must have the debug option turned off.DISA STIG VMware vSphere 7.0 Perfcharts Tomcat v1r1Unix

SYSTEM AND INFORMATION INTEGRITY

VCPG-70-000016 - VMware Postgres must provide nonprivileged users with minimal error information.DISA STIG VMware vSphere 7.0 PostgreSQL v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCST-67-000022 - The Security Token Service must set the welcome-file node to a default web page.DISA STIG VMware vSphere 6.7 STS Tomcat v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

VCST-67-000024 - The Security Token Service must be configured to show error pages with minimal information.DISA STIG VMware vSphere 6.7 STS Tomcat v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

VCST-70-000023 - The Security Token Service must not show directory listings.DISA STIG VMware vSphere 7.0 STS Tomcat v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCST-70-000024 - The Security Token Service must be configured to not show error reports.DISA STIG VMware vSphere 7.0 STS Tomcat v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCUI-67-000020 - vSphere UI must set the welcome-file node to a default web page.DISA STIG VMware vSphere 6.7 UI Tomcat v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

VCUI-67-000022 - vSphere UI must be configured to hide the server version.DISA STIG VMware vSphere 6.7 UI Tomcat v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

VCUI-70-000022 - vSphere UI must set the welcome-file node to a default web page.DISA STIG VMware vSphere 7.0 vCA UI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCUI-70-000025 - vSphere UI must be configured to show error pages with minimal information.DISA STIG VMware vSphere 7.0 vCA UI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCUI-70-000027 - vSphere UI must have the debug option turned off.DISA STIG VMware vSphere 7.0 vCA UI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

WDNS-SI-000003 - The DNS Name Server software must be configured to refuse queries for its version information.DISA Microsoft Windows 2012 Server DNS STIG v2r7Windows

SYSTEM AND INFORMATION INTEGRITY

WDNS-SI-000004 - The HINFO, RP, TXT and LOC RR types must not be used in the zone SOA.DISA Microsoft Windows 2012 Server DNS STIG v2r7Windows

SYSTEM AND INFORMATION INTEGRITY

WN22-00-000030 - Windows Server 2022 administrative accounts must not be used with applications that access the internet, such as web browsers, or with potential internet sources, such as email.DISA Microsoft Windows Server 2022 STIG v2r4Windows

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY