The container platform application program interface (API) must uniquely identify and authenticate users.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-233076SRG-APP-000148-CTR-000340SV-233076r1051115_ruleCCI-000764medium
Description
The container platform requires user accounts to perform container platform tasks. These tasks are often performed through the container platform API. Protecting the API from users who are not authorized or authenticated is essential to keep the container platform stable. Protection of platform and application data and enhances the protections put in place for Denial-of Service (DoS) attacks.
STIGDate
Container Platform Security Requirements Guide2025-05-15

Related Frameworks

4 paths across 3 frameworks
NIST 800-531 mapping
IA-2
1.00
  • DISA · 2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.5.1
1.00
  • DISA · 2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.5.2
1.00
  • DISA · 2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000764
1.00
  • DISA · 2 · disa_xccdf · related

Details

Check Text (C-233076r1051115_chk)

Review the container platform configuration to determine if users are uniquely identified and authenticated before the API is executed. If users are not uniquely identified or are not authenticated, this is a finding.

Fix Text (F-35980r600716_fix)

Configure the container platform to uniquely identify and authenticate users before container platform API access.