vSphere UI plugins must be authorized before use.
An XCCDF Rule
Description
<VulnDiscussion>The vSphere UI ships with a number of plugins out of the box. Any additional plugins may affect the availability and integrity of the system and must be approved and documented by the information system security officer (ISSO) before deployment.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-256786r889357_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
For every unauthorized plugin returned by the check, run the following command:
# rm <file>