Skip to main content
CUI

Documentation - V-206353

V-206353

Web Server Security Requirements Guide

CAT II

Title

The web server must use cryptography to protect the integrity of remote sessions.

Description

<VulnDiscussion>Data exchanged between the user and the web server can range from static display data to credentials used to log into the hosted application. Even when data appears to be static, the non-displayed logic in a web page may expose business logic or trusted system relationships. The integrity of all the data being exchanged between the user and web server must always be trusted. To protect the integrity and trust, encryption methods should be used to protect the complete communicatio...

Fix Text (Documentation Requirement)

Configure the web server to utilize encryption during remote access sessions.

Documentation Status

Cancel
CUI