V-204749
Application Server Security Requirements Guide
Title
The application server must provide security extensions to extend the SOAP protocol and provide secure authentication when accessing sensitive data.
Description
<VulnDiscussion>Application servers may provide a web services capability that could be leveraged to allow remote access to sensitive application data. A web service, which is a repeatable process used to make data available to remote clients, should not be confused with a web server. Many web services utilize SOAP, which in turn utilizes XML and HTTP as a transport. Natively, SOAP does not provide security protections. As such, the application server must provide security extensions to enhanc...
Fix Text (Documentation Requirement)
Configure the application server to utilize secure authentication when SOAP web services are used to access sensitive data.