Skip to content
ATO Pathways
  Log In

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000251-DB-000391

    <GroupDescription></GroupDescription>
    Group
    Show

  • CA IDMS must limit use of IDMS server used in issuing dynamic statements from client applications circumstances determined by the organization.

    &lt;VulnDiscussion&gt;Server tasks can execute dynamic SQL code and should be protected.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePosi...
    Rule Medium Severity
    Show

  • SRG-APP-000251-DB-000392

    <GroupDescription></GroupDescription>
    Group
    Show

  • CA IDMS and associated applications, when making use of dynamic code execution, must scan input data for invalid values that may indicate a code injection attack.

    &lt;VulnDiscussion&gt;When the use of dynamic SQL is necessary, the code should be written so that the invalid data can be found and the appropriat...
    Rule Medium Severity
    Show

  • SRG-APP-000266-DB-000162

    <GroupDescription></GroupDescription>
    Group
    Show

  • IDMS must suppress security-related messages so that no information is returned that can be exploited.

    &lt;VulnDiscussion&gt;Error messages issued to non-privileged users may have contents that should be considered confidential. IDMS should be config...
    Rule Medium Severity
    Show

  • SRG-APP-000266-DB-000162

    <GroupDescription></GroupDescription>
    Group
    Show

  • Custom database code and associated application code must not contain information beyond what is needed for troubleshooting.

    &lt;VulnDiscussion&gt;Error codes issued by custom code could provide more information than needed for problem resolution and should be vetted to m...
    Rule Medium Severity
    Show

  • SRG-APP-000267-DB-000163

    <GroupDescription></GroupDescription>
    Group
    Show

  • IDMS must reveal security-related messages only to authorized users.

    &lt;VulnDiscussion&gt;Error messages issued to non-privileged users may have contents that should be considered confidential. IDMS should be config...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules