UCF STIG Viewer Logo

Software and/or firmware used for collaborative computing devices must prohibit remote activation excluding the organization-defined exceptions where remote activation is to be allowed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-35528 SRG-APP-000202-MAPP-NA SV-46815r1_rule Medium
Description
Collaborative computing devices include, networked white boards, cameras, and microphones. Collaborative software examples include instant messaging or chat clients. Rationale for non-applicability: Remote activation requires the application to provide some form of server functionality even if only to listen for remote activation calls. Server applications are expressly excluded from the scope of this SRG. If the remote activation is achieved locally through an operating system command, then this control must be implemented by the operating system. In this case, the application has no reliable mechanism to detect that the activation is remote.
STIG Date
Mobile Application Security Requirements Guide 2013-01-04

Details

Check Text ( C-43868r1_chk )
This requirement is NA for the MAPP SRG.
Fix Text (F-40069r1_fix)
The requirement is NA. No fix is required.