The CBIND Resource(s) for the WebSphere Application Server is(are) not protected in accordance with security requirements.
An XCCDF Rule
Description
<VulnDiscussion>SAF resources provide the ability to control access to functions and services of the WebSphere Application Server (WAS) environment. Many of these resources provide operational and administrative support for WAS. Failure to properly protect these resources may lead to unauthorized access. This exposure could compromise the integrity and availability of application services and customer data.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility>Information Assurance Officer</Responsibility><IAControls></IAControls>
- ID
- SV-3899r3_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
The IAO will ensure that the CBIND resource is defined to the ACP with an access of none.
Ensure the following items are in effect for CBIND resource protection:
The CLASMAP record defines the CBIND resource class.