Item Search

NameAudit NamePluginCategory
1.3 WN22-00-000030CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IWindows

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

1.3 WN22-00-000030CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IWindows

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

1.4 IBMW-LS-000040CIS IBM WebSphere Liberty Server STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

IBMW-LS-000040 - The WebSphere Liberty Server must log remote session and security activity.DISA IBM WebSphere Liberty Server STIG v2r2Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

IBMW-LS-000040 - The WebSphere Liberty Server must log remote session and security activity.DISA IBM WebSphere Liberty Server STIG v2r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

IIST-SI-000233 - Warning and error messages displayed to clients must be modified to minimize the identity of the IIS 10.0 website, patches, loaded modules, and directory paths.DISA Microsoft IIS 10.0 Site STIG v2r16Windows

SYSTEM AND INFORMATION INTEGRITY

IIST-SV-000215 - ASP.NET version must be removed from the HTTP Response Header information.DISA Microsoft IIS 10.0 Server STIG v3r7Windows

SYSTEM AND INFORMATION INTEGRITY

OH12-1X-000346 - OHS must display a default hosted application web page, not a directory listing, when a requested web page cannot be found.DISA STIG Oracle HTTP Server 12.1.3 v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

OH12-1X-000347 - OHS must have the ServerSignature directive disabled.DISA STIG Oracle HTTP Server 12.1.3 v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

OH12-1X-000348 - OHS must have the ServerTokens directive set to limit the response header.DISA STIG Oracle HTTP Server 12.1.3 v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

OH12-1X-000349 - OHS must have the Alias /error directive defined to reference the directory accompanying the ErrorDocument directives to minimize the identity of OHS, patches, loaded modules, and directory paths in warning and error messages displayed to clients.DISA STIG Oracle HTTP Server 12.1.3 v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

OH12-1X-000350 - OHS must have the permissions set properly via the Directory directive accompanying the ErrorDocument directives to minimize improper access to the warning and error messages displayed to clients - AllowOverrideDISA STIG Oracle HTTP Server 12.1.3 v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

OH12-1X-000351 - OHS must have defined error pages for common error codes that minimize the identity of the web server, patches, loaded modules, and directory paths - ErrorDocument 401DISA STIG Oracle HTTP Server 12.1.3 v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

OH12-1X-000351 - OHS must have defined error pages for common error codes that minimize the identity of the web server, patches, loaded modules, and directory paths - ErrorDocument 408DISA STIG Oracle HTTP Server 12.1.3 v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

OH12-1X-000351 - OHS must have defined error pages for common error codes that minimize the identity of the web server, patches, loaded modules, and directory paths - ErrorDocument 412DISA STIG Oracle HTTP Server 12.1.3 v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

PGS9-00-000600 - PostgreSQL must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA STIG PostgreSQL 9.x on RHEL DB v2r5PostgreSQLDB

SYSTEM AND INFORMATION INTEGRITY

PHTN-67-000040 - The Photon operating system must configure rsyslog to offload system logs to a central server.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

WBSP-AS-000070 - The WebSphere Application Server security auditing must be enabled.DISA IBM WebSphere Traditional 9 STIG v2r1 MiddlewareUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

WBSP-AS-000070 - The WebSphere Application Server security auditing must be enabled.DISA IBM WebSphere Traditional 9 Windows STIG v2r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

WDNS-SI-000003 - The DNS Name Server software must be configured to refuse queries for its version information.DISA Microsoft Windows 2012 Server Domain Name System STIG v2r7Windows

SYSTEM AND INFORMATION INTEGRITY