V-222597
Application Security and Development Security Technical Implementation Guide
Title
The application must implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission unless otherwise protected by alternative physical safeguards, such as, at a minimum, a Protected Distribution System (PDS).
Description
<VulnDiscussion>Data is subject to manipulation and other integrity related attacks whenever that data is transferred across a network. To protect data integrity during transmission, the application must implement mechanisms to ensure the integrity of all transmitted information. All transmitted information means that the protections are not restricted to just the data itself. Protection mechanisms must be extended to include data labels, security parameters, or metadata if data protection requ...
Fix Text (Documentation Requirement)
Configure the application to use cryptographic protections to prevent unauthorized disclosure of application data based upon the application architecture.