ESX Agent Manager application files must be verified for their integrity.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-239379	VCEM-67-000008	SV-239379r674631_rule		Medium

Description
Verifying that ESX Agent Manager application code is unchanged from its shipping state is essential for file validation and non-repudiation of the ESX Agent Manager. There is no reason that the MD5 hash of the rpm original files should be changed after installation, excluding configuration files. Satisfies: SRG-APP-000131-WSR-000051, SRG-APP-000357-WSR-000150

STIG	Date
VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide	2022-06-17

Details

Check Text ( C-42612r674629_chk )
At the command prompt, execute the following command: # rpm -V vmware-eam|grep "^..5......"|grep -E "\.war|\.jar|\.sh|\.py" If there is any output, this is a finding.

Fix Text (F-42571r674630_fix)
Reinstall the VCSA or roll back to a snapshot. Modifying the EAM installation files manually is not supported by VMware.