Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-16819 | APP3750 | SV-17819r1_rule | DCMC-1 | Medium |
Description |
---|
New mobile code types may introduce unknown vulnerabilities if a risk assessment is not completed prior to the use of mobile code. |
STIG | Date |
---|---|
Application Security and Development Checklist | 2014-04-03 |
Check Text ( C-17818r1_chk ) |
---|
Interview the designer and determine if new mobile code is in development. If no new mobile code is in development, this check is not applicable. 1) If new code is being developed determine and a risk assessment has not been performed, it is a finding. |
Fix Text (F-17127r1_fix) |
---|
Remove mobile code or perform a risk assessment on mobile code. |