V-204780
Application Server Security Requirements Guide
Title
The application server must associate organization-defined types of security attributes having organization-defined security attribute values with information in process.
Description
<VulnDiscussion>The application server provides a framework for applications to communicate between each other to form an overall well-designed application to perform a task. As the information traverses the application server and the components, the security attributes must be maintained. Without the association of security attributes to information, there is no basis for the application server or hosted applications to make security-related access control decisions. The security attributes ...
Fix Text (Documentation Requirement)
Configure the application server to associate organization-defined types of security attributes having organization-defined security attribute values with information in process.