CICS logonid(s) must be configured with proper timeout and signon limits.
An XCCDF Rule
Description
<VulnDiscussion>CICS is a transaction-processing product that provides programmers with the facilities to develop interactive applications. Improperly defined or controlled CICS userids (i.e., region, default, and terminal users) may provide an exposure and vulnerability within the CICS environment. This could result in the compromise of the confidentiality, integrity, and availability of the CICS region, applications, and customer data.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-224307r520243_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Ensure that all userids with a CICS segment have the TIMEOUT parameter set to 15 minutes.
Ensure that all LIDs authorized to access a CICS facility restrict MULTSIGN to test and development use.
Examples:
SET LID
LIST CICS