V-222437
Application Security and Development Security Technical Implementation Guide
Title
The application must display the time and date of the users last successful logon.
Description
<VulnDiscussion>Providing a last successful logon date and time stamp notification to the user when they authenticate and access the application allows the user to determine if their application account has been used without their knowledge. Armed with that information, the user can notify the application administrator and initiate a forensics investigation to identify root cause. Without providing this information to the user, a potential compromise of user accounts could go unnoticed.</Vuln...
Fix Text (Documentation Requirement)
Design and configure the application to display the date and time when the user was last successfully granted access to the application.