Skip to content

IBM WebSphere Liberty Server Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Security cookies must be set to HTTPOnly.

    <VulnDiscussion>Web applications use cookies to track users across requests. These cookies, while typically not sensitive in themselves, conn...
    Rule Medium Severity
  • SRG-APP-000016-AS-000013

    <GroupDescription></GroupDescription>
    Group
  • The WebSphere Liberty Server must log remote session and security activity.

    &lt;VulnDiscussion&gt;Security auditing must be configured in order to log remote session activity. Security auditing will not be performed unless ...
    Rule Medium Severity
  • SRG-APP-000033-AS-000024

    <GroupDescription></GroupDescription>
    Group
  • Users in the REST API admin role must be authorized.

    &lt;VulnDiscussion&gt;Users with console access and OS permissions to the folders where the Liberty Server is installed can make changes to the ser...
    Rule High Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules