CA IDMS Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Custom database code and associated application code must not contain information beyond what is needed for troubleshooting.
<VulnDiscussion>Error codes issued by custom code could provide more information than needed for problem resolution and should be vetted to m...Rule Medium Severity -
SRG-APP-000267-DB-000163
<GroupDescription></GroupDescription>Group -
IDMS must reveal security-related messages only to authorized users.
<VulnDiscussion>Error messages issued to non-privileged users may have contents that should be considered confidential. IDMS should be config...Rule Medium Severity -
SRG-APP-000267-DB-000163
<GroupDescription></GroupDescription>Group -
CA IDMS programs that can be run through a CA IDMS CV must be defined to the CV.
<VulnDiscussion>The ability to add programs to be executed under IDMS can be a problem if malicious programs are added. CA IDMS must prevent ...Rule Medium Severity -
SRG-APP-000383-DB-000364
<GroupDescription></GroupDescription>Group -
IDMS terminal and lines that are not secure must be disabled.
<VulnDiscussion>Use of nonsecure network functions, ports, protocols, and services exposes the system to avoidable threats.</VulnDiscussio...Rule Medium Severity -
SRG-APP-000431-DB-000388
<GroupDescription></GroupDescription>Group -
All installation-delivered IDMS Developer-level Programs must be properly secured.
<VulnDiscussion>Developer-level programs that are not secured may allow unauthorized users to access and manipulate various resources within ...Rule Medium Severity -
SRG-APP-000033-DB-000084
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.