OpenControls Logo

STIG Viewer

STIGViewer Support

The WebSphere Application Server security auditing must be enabled.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-81203WBSP-AS-000070SV-95917r1_ruleCCI-000067medium
Description
Security auditing will not be performed unless the audit security subsystem has been enabled. Global security must be enabled for the security audit subsystem to function, as no security auditing occurs if global security is not also enabled. Enable global security before enabling security auditing. Satisfies: SRG-APP-000016-AS-000013, SRG-APP-000343-AS-000030, SRG-APP-000080-AS-000045, SRG-APP-000092-AS-000053, SRG-APP-000266-AS-000168, SRG-APP-000267-AS-000170
STIGDate
IBM WebSphere Traditional V9.x Security Technical Implementation Guide2018-08-24

Related Frameworks

6 mappings across 4 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (4) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

IAC-21.4Auditing Use of Privileged Functions
1.00
MON-09Non-Repudiation
1.00
NET-14.1Automated Monitoring & Control
1.00
TDA-19Error Handling
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (80) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-11Device Lock
1.00
AC-11(1)Pattern-hiding Displays
1.00
AC-16Security and Privacy Attributes
1.00
AC-17(1)Monitoring and Control
1.00
AC-2(1)Automated System Account Management
1.00
AC-2(11)Usage Conditions
1.00
AC-2(2)Automated Temporary and Emergency Account Management
1.00
AC-2(3)Disable Accounts
1.00
AC-2(4)Automated Audit Actions
1.00
AC-3Access Enforcement
1.00

+70 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (2) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.12
1.00
3.1.7
1.00
CCI6 mappings
CCI-000067
1.00
CCI-000166
1.00
CCI-001312
1.00
CCI-001314
1.00
CCI-001464
1.00
CCI-002234
1.00

Details

Check Text (C-95917r1_chk)

In the administrative console, navigate to Security >> Security auditing. If "Enable security auditing" is not enabled, this is a finding.

Fix Text (F-87981r1_fix)

In the administrative console, navigate to Security >> Security auditing to enable. Restart the DMGR and all the JVMs.