V-204781
Application Server Security Requirements Guide
Title
The application server must associate organization-defined types of security attributes having organization-defined security attribute values with information in transmission.
Description
<VulnDiscussion>The application server provides a framework for applications to communicate between each other to form an overall well-designed application to perform a task. As the information is transmitted, the security attributes must be maintained. Without the association of security attributes to information, there is no basis for the application to make security-related access control decisions. Security attributes are abstractions representing the basic properties or characteristics o...
Fix Text (Documentation Requirement)
Configure the application server to associate organization-defined types of security attributes having organization-defined security attribute values with information in transmission.