OpenControls Logo

STIG Viewer

STIGViewer Support

Xylok Security Suite must be running a supported version.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-269577XYLK-20-000051SV-269577r1053506_ruleCCI-003992high
Description
It is critical to the security and stability of Xylok to ensure that updates and patches are deployed through a trusted software supply chain. Key elements to having a trusted supply chain include ensuring that versions deployed come from known, trusted sources. Additionally, it is important to check for and apply security-relevant updates in a timely manner. To help users manage updates, Xylok manages versions via their internal portal. Satisfies: SRG-APP-000131, SRG-APP-000456
STIGDate
Xylok Security Suite 20.x Security Technical Implementation Guide2025-12-04

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CHG-04.2Signed Components
0.50
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (8) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-2(10)Shared and Group Account Credential Change
1.00
CM-14Signed Components
1.00
CM-5(3)Signed Components
1.00
CM-7(5)Authorized Software — Allow-by-exception
1.00
IA-2(5)Individual Authentication with Group Authentication
1.00
SC-23Session Authenticity
1.00
SC-3Security Function Isolation
1.00
SI-2Flaw Remediation
1.00
CCI1 mapping
CCI-003992
1.00

Details

Check Text (C-269577r1053506_chk)

Verify the latest install is being used. Log on to the GUI and locate the version from the lower left corner. Compare this version with the latest release on the Xylok portal (https://downloads.xylok.io). If the current version is not the latest version from the Xylok portal, this is a finding.

Fix Text (F-73511r1053505_fix)

Update Xylok Security Suite to the latest version. Follow the instructions found here: https://app.xylok.io/docs/01-server-admin/installation/updating/.