Skip to content

Application Security and Development Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000401

    <GroupDescription></GroupDescription>
    Group
  • The application, for PKI-based authentication, must implement a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network.

    &lt;VulnDiscussion&gt;A local cache of revocation data is also known as a CRL list. This list contains a list of revoked certificates and can be pe...
    Rule Medium Severity
  • SRG-APP-000178

    <GroupDescription></GroupDescription>
    Group
  • The application must not display passwords/PINs as clear text.

    &lt;VulnDiscussion&gt;To prevent the compromise of authentication information such as passwords during the authentication process, the feedback fro...
    Rule High Severity
  • SRG-APP-000179

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules