Windows Server 2019 FTP servers must be configured to prevent access to the system drive.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-205854 | WN19-00-000430 | SV-205854r991589_rule | CCI-000366 | medium |
| Description | ||||
| The FTP service allows remote users to access shared files and directories that could provide access to system resources and compromise the system, especially if the user can gain access to the root directory of the boot drive. | ||||
| STIG | Date | |||
| Microsoft Windows Server 2019 Security Technical Implementation Guide | 2025-05-23 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
CM-6
1.00
- DISA · 3 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.4.1
1.00
- DISA · 3 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.4.2
1.00
- DISA · 3 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000366
1.00
- DISA · 3 · disa_xccdf · related
Details
Check Text (C-205854r991589_chk)
If FTP is not installed on the system, this is NA.
Open "Internet Information Services (IIS) Manager".
Select "Sites" under the server name.
For any sites with a Binding that lists FTP, right-click the site and select "Explore".
If the site is not defined to a specific folder for shared FTP resources, this is a finding.
If the site includes any system areas such as root of the drive, Program Files, or Windows directories, this is a finding.
Fix Text (F-6119r355925_fix)
Configure the FTP sites to allow access only to specific FTP shared resources. Do not allow access to other areas of the system.