UCF STIG Viewer Logo

ESX Agent Manager application files must be verified for their integrity.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239379 VCEM-67-000008 SV-239379r674631_rule Medium
Description
Verifying that ESX Agent Manager application code is unchanged from its shipping state is essential for file validation and non-repudiation of the ESX Agent Manager. There is no reason that the MD5 hash of the rpm original files should be changed after installation, excluding configuration files. Satisfies: SRG-APP-000131-WSR-000051, SRG-APP-000357-WSR-000150
STIG Date
VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42612r674629_chk )
At the command prompt, execute the following command:

# rpm -V vmware-eam|grep "^..5......"|grep -E "\.war|\.jar|\.sh|\.py"

If there is any output, this is a finding.
Fix Text (F-42571r674630_fix)
Reinstall the VCSA or roll back to a snapshot. Modifying the EAM installation files manually is not supported by VMware.