WebSphere MQ started tasks are not defined in accordance with the proper security requirements.
An XCCDF Rule
Description
<VulnDiscussion>Started tasks are used to execute WebSphere MQ queue manager services. Improperly defined WebSphere MQ started tasks may result in inappropriate access to application resources and the loss of accountability. This exposure could compromise the availability of some system services and application data.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-224358r520975_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
The IAO will ensure that all MQSeries/WebSphere MQ started tasks are properly defined.
Review MQSeries/WebSphere MQ started tasks and ensure the following items are in effect:
NOTE: ssid is the queue manager name (a.k.a., subsystem identifier).
ssidMSTR is the name of a queue manager STC.