V-204710
Application Server Security Requirements Guide
Title
The application server must implement cryptography mechanisms to protect the integrity of the remote access session.
Description
<VulnDiscussion>Encryption is critical for protection of remote access sessions. If encryption is not being used for integrity, malicious users may gain the ability to modify the application server configuration. The use of cryptography for ensuring integrity of remote access sessions mitigates that risk. Application servers utilize a web management interface and scripted commands when allowing remote access. Web access requires the use of TLS and scripted access requires using ssh or some othe...
Fix Text (Documentation Requirement)
Configure the application server to implement cryptography mechanisms to protect the integrity of the remote access session.