Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • WG385

    Group
  • All web server documentation, sample code, example applications, and tutorials must be removed from a production web server.

    Web server documentation, sample code, example applications, and tutorials may be an exploitable threat to a web server. A production web server may only contain components that are operationally n...
    Rule High Severity
  • WG145

    Group
  • The private web server must use an approved DoD certificate validation process.

    Without the use of a certificate validation process, the site is vulnerable to accepting certificates that have expired or have been revoked. This would allow unauthorized individuals access to the...
    Rule Medium Severity
  • WG237

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules