The Lighttpd baseline must be maintained.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-89287	VRAU-LI-000310	SV-99937r1_rule		Medium

Description
Without maintenance of a baseline of current Lighttpd software, monitoring for changes cannot be complete and unauthorized changes to the software can go undetected. Changes to Lighttpd could be the result of intentional or unintentional actions.

STIG	Date
VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide	2018-10-12

Details

Check Text ( C-88979r1_chk )
Obtain supporting documentation from the ISSO. Determine if a software baseline is being maintained. If a baseline is not being maintained, this is a finding.

Fix Text (F-96029r1_fix)
Update the software baseline.