V-222552
Application Security and Development Security Technical Implementation Guide
Title
The application must map the authenticated identity to the individual user or group account for PKI-based authentication.
Description
<VulnDiscussion>Without mapping the certificate used to authenticate to a corresponding user account, the ability to determine the identity of the individual user or group will not be available for forensic analysis. Some CAs will include identifying information like an email address within the certificate itself. When the email is assigned to an individual, this helps to identify the individual user who has been assigned the certificate. When identifying information is not available within the...
Fix Text (Documentation Requirement)
Configure the application to map certificate information to individual users or group accounts or create a process for automatically determining the individual user or group based on certificate information provided in the logs.