The network device must prevent unauthorized and unintended information transfer via shared system resources.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000190-NDM-000147	SRG-NET-000190-NDM-000147	SRG-NET-000190-NDM-000147_rule		Medium

Description
The purpose of this control is to prevent information produced by the actions of a prior user, role, or the actions of a process acting on behalf of a prior user or role from being available to any current user, role, or process for obtaining access to a shared system resource (e.g., registers, main memory, or secondary storage) after the resource has been released back to the network device. Control of information in shared resources is also referred to as object reuse.

Description

The purpose of this control is to prevent information produced by the actions of a prior user, role, or the actions of a process acting on behalf of a prior user or role from being available to any current user, role, or process for obtaining access to a shared system resource (e.g., registers, main memory, or secondary storage) after the resource has been released back to the network device. Control of information in shared resources is also referred to as object reuse.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000190-NDM-000147_chk )
Verify the network device prevents unauthorized and unintended information transfer via shared system resources. If the network device does not prevent unauthorized and unintended information transfer via shared system resources, this is a finding.

Fix Text (F-SRG-NET-000190-NDM-000147_fix)
Configure the network device to prevent unauthorized and unintended information transfer via shared system resources.