| V-22689 | Medium | CL/SuperSession is not properly configured to generate SMF records for audit trail and accounting reports. | Product configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be... |
| V-17067 | Medium | CL/SuperSession STC data sets must be properly protected. | CL/SuperSession STC data sets provide the capability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to their data sets could result in... |
| V-22691 | Medium | CL/SuperSession APPCLASS member is not configured in accordance with the proper security requirements. | Product configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be... |
| V-22690 | Medium | CL/SuperSession KLVINNAM member must be configured in accordance to security requirements. | CL/SuperSession configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls... |
| V-18011 | Medium | CL/SuperSessions Resouce Class will be defined or active in the ACP. | Failure to use a robust ACP to control a product could potentially compromise the integrity and availability of the MVS operating system and user data. |
| V-17452 | Medium | CL/SuperSession Started Task name is not properly identified / defined to the system ACP. | CL/SuperSession requires a started task that will be restricted to certain resources, datasets and other system functions. By defining the started task as a userid to the system ACP, It allows the... |
| V-18014 | Medium | CL/SuperSession profile options are set improperly. | Product configuration/parameters control the security and operational characteristics of products. If these parameter values are improperly specified, security and operational controls may be... |
| V-17454 | Medium | CL/SuperSession Started task(s) must be properly defined to the STARTED resource class for RACF.
| Access to product resources should be restricted to only those individuals responsible for the application connectivity and who have a requirement to access these resources. Improper control of... |
| V-16932 | Medium | CL/SuperSession Install data sets must be properly protected. | CL/SuperSession Install data sets provide the capability to use privileged functions and/or have access to sensitive data. Failure to properly restrict access to their data sets could result in... |
