← Back to AvePoint Fly Server Security Technical Implementation Guide

V-284032

CAT I (High)

Fly Server must be a version supported by the vendor.

Rule ID

SV-284032r1206448_rule

STIG

AvePoint Fly Server Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-003376

Discussion

Unsupported software and systems should not be used because fixes to newly identified bugs will not be implemented by the vendor. The lack of support can result in potential vulnerabilities. Software and systems at unsupported servicing levels or releases will not receive security updates for new vulnerabilities, which leaves them subject to exploitation. When maintenance updates and patches are no longer available, software is no longer considered supported and should be upgraded or decommissioned.

Check Content

Check the Fly Server release version:
- Log on to Fly Server with an admin account.
- On the Management >> System Information page, note the version number.
- Compare the version number with the product end of life information documented on AvePoint's website.

If the version information is displayed is not supported by the vendor, this is a finding.

Fix Text

Upgrade the system to a supported version.