V-204708
Application Server Security Requirements Guide
Title
The application server must limit the number of concurrent sessions to an organization-defined number for all accounts and/or account types.
Description
<VulnDiscussion>Application management includes the ability to control the number of sessions that utilize an application by all accounts and/or account types. Limiting the number of allowed sessions is helpful in limiting risks related to Denial of Service attacks. Application servers host and expose business logic and application processes. The application server must possess the capability to limit the maximum number of concurrent sessions in a manner that affects the entire application ser...
Fix Text (Documentation Requirement)
Configure the application server to limit the number of concurrent sessions for all accounts and/or account types to the organization-defined number.