Oracle WebLogic must utilize automated mechanisms to prevent program execution on the information system.
An XCCDF Rule
Description
The application server must provide a capability to halt or otherwise disable the automatic execution of deployed applications until such time that the application is considered part of the established application server baseline. Deployment to the application server should not provide a means for automatic application start-up should the application server itself encounter a restart condition.
- ID
- SV-235963r628667_rule
- Version
- WBLC-03-000129
- Severity
- Low
- References
- Updated
Remediation Templates
A Manual Procedure
1. Access AC
2. From 'Domain Structure', select the top-level domain
3. Select 'Configuration' tab -> 'General' tab
4. Check 'Production Mode' checkbox. Click 'Save'
5. Restart all servers