Overview:

Title: The application must validate the integrity of security attributes exchanged between systems.

Vulnerability ID: V-32507

STIG ID:

IA Controls: None

Severity: medium

Description: When data is exchanged between information systems, the security attributes associated with said data needs to be maintained.

Security attributes are an abstraction representing the basic properties or characteristics of an entity with respect to safeguarding information, typically associated with internal data structures (e.g., records, buffers, files) within the information system and used to enable the implementation of access control and flow control policies, reflect special dissemination, handling or distribution instructions, or support other aspects of the information security policy.

Security attributes may be explicitly or implicitly associated with the information contained within the information system.

This requirement is specific to network devices designed to perform information flow control. This requirement is NA for databases.

Check Text: This check is NA for databases.

Fix Text: This fix is NA for databases.

[divider]

Interpreting V-32507:

Coming Soon!

Return to the DoD STIGs – Database Security Requirements Guide