TMA-NGINX-1.1.1

Ensure NGINX is installed

MittelStufe 1Automatisiertnginx

Beschreibung

An NGINX installation must be present on the system. To ensure support for modern security standards (such as TLS 1.3 and HTTP/3) and to mitigate known vulnerabilities, the installed version must be 1.28.0 or later and compiled with the necessary modules. Compliant when nginx -v reports version 1.28.0 or later. Evaluated on the merged configuration printed by `nginx -T` (all included files; needs permission to read them). CIS marks this recommendation Manual; the automated check implements its audit procedure.

So wird geprüft

Prüfmethode: Shell-Befehl

shell

v=$(nginx -v 2>&1) || exit 1; v=$(printf '%s\n' "$v" | sed -n 's#.*nginx/\([0-9][0-9.]*\).*#\1#p' | head -n1); [ -n "$v" ] || exit 1; [ "$(printf '%s\n%s\n' 1.28.0 "$v" | sort -t. -k1,1n -k2,2n -k3,3n | head -n1)" = 1.28.0 ] && echo compliant || echo noncompliant

Erwartete Ausgabe: compliant

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Install or upgrade NGINX to 1.28.0 or later, preferably from the official nginx.org repositories.

Eigenschaften

Betriebssysteme: Beliebig
Tags: nginxinstallation
Referenz: CIS NGINX Benchmark v3.0.0 - 1.1.1 Ensure NGINX is installed

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target nginx