← Back to VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide

V-240253

CAT II (Medium)

The Lighttpd baseline must be maintained.

Rule ID

SV-240253r879640_rule

STIG

VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-001190

Discussion

Without maintenance of a baseline of current Lighttpd software, monitoring for changes cannot be complete and unauthorized changes to the software can go undetected. Changes to Lighttpd could be the result of intentional or unintentional actions.

Check Content

Obtain supporting documentation from the ISSO.

Determine if a software baseline is being maintained.

If a baseline is not being maintained, this is a finding.

Fix Text

Update the software baseline.