OpenControls Logo

STIG Viewer

STIGViewer Support

vSphere UI plugins must be authorized before use.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-256786VCUI-70-000009SV-256786r889357_ruleCCI-001749medium
Description
The vSphere UI ships with a number of plugins out of the box. Any additional plugins may affect the availability and integrity of the system and must be approved and documented by the information system security officer (ISSO) before deployment.
STIGDate
VMware vSphere 7.0 vCenter Appliance UI Security Technical Implementation Guide2023-06-15

Related Frameworks

1 mapping across 2 frameworks
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (12) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-2(10)Shared and Group Account Credential Change
1.00
AU-4Audit Log Storage Capacity
1.00
CM-14Signed Components
1.00
CM-5(1)Automated Access Enforcement and Audit Records
1.00
CM-5(3)Signed Components
1.00
CM-7Least Functionality
1.00
CM-7(5)Authorized Software — Allow-by-exception
1.00
IA-2(5)Individual Authentication with Group Authentication
1.00
SC-2Separation of System and User Functionality
1.00
SC-23Session Authenticity
1.00

+2 more (top 10 by confidence shown)

CCI1 mapping
CCI-001749
1.00

Details

Check Text (C-256786r889357_chk)

At the command prompt, run the following command: # diff <(find /usr/lib/vmware-vsphere-ui/plugin-packages/vsphere-client/plugins -type f|sort) <(rpm -ql vsphere-ui|grep "/usr/lib/vmware-vsphere-ui/plugin-packages/vsphere-client/plugins/"|sort) If there is any output, this indicates a vSphere UI plugin is present that does not ship with the vCenter Server Appliance (VCSA). If this plugin is not known and approved, this is a finding.

Fix Text (F-60404r889356_fix)

For every unauthorized plugin returned by the check, run the following command: # rm <file>